Trojanized Claude Code extension on Open VSX installs persistent SSH backdoor on developer machines

The trojanized artifact is anthropic.claude-code 2.1.313 from Open VSX, with 66 lines of JavaScript injected into the legitimate bundle so the attacker's script executes before the extension's own code and establishes persistent SSH access. The Hacker News reports the root cause as a compromise of the Cursor Marketplace, which Cursor briefly took offline to remove the malware. The articles give no CVE ID, attribution or indicators of compromise. Defenders should check developer systems for this extension version and review them for unauthorised SSH access, though the articles do not detail specific remediation steps.

For security analysts · Written by AI from 2 sources · Wrong?