Sign inGet the app

Malware · 2 sources · latest 8h

Tampered Claude Code extension spread SSH backdoor via Open VSX and Cursor marketplaces

Severity
High
Sources
2

What happened

A fake, tampered version of Anthropic's Claude Code add-on for code editors was made available for download and could let attackers secretly connect to developers' computers. Reports say it was online for around 11 hours and may have reached up to 5,000 developers. Microsoft's own extension store never carried the bad version.

Like I’m new · Written by AI from 2 sources · Wrong?

Read the full story at the sourceAsk about this story

Full story timeline · 2 updates

  1. Fri 30 OctoberClaude Code extension poisoned with persistent SSH backdoorHelp Net Security
  2. Malicious Claude Code extension on Cursor planted SSH backdoorsBleepingComputer

Who reported · 2 outlets

Help Net SecurityBleepingComputer

Report a problem