Sign inGet the app

Malware · 2 sources · latest 13h

Trojanized Claude Code extension on Open VSX installs persistent SSH backdoor on developer machines

Severity
High
Sources
2

What happened

A tampered version of the Claude Code add-on for code editors was found on a public extension store. It secretly gave attackers a lasting way to log in remotely to developers' computers. The problem was traced to a compromise of the Cursor Marketplace, and Cursor briefly took the service offline to remove the malware.

Like I’m new · Written by AI from 2 sources · Wrong?

Read the full story at the sourceAsk about this story

Full story timeline · 2 updates

  1. Fri 30 OctoberMalicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote AccessGBHackers
  2. Official Claude Code VS Code Extension Compromised to Install Persistent SSH BackdoorThe Hacker News

Who reported · 2 outlets

GBHackersThe Hacker News

Report a problem