Trojanized Claude Code extension on Open VSX installs persistent SSH backdoor on developer machines
MALWAREAnthropicredteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
Researchers found that anthropic.claude-code version 2.1.313, obtained from Open VSX, had 66 lines of malicious JavaScript added to the legitimate extension bundle. The loader runs before the extension's normal code and sets up persistent SSH access to infected hosts. The issue has been traced to a compromise of the Cursor Marketplace, and Cursor briefly took the service down to remove the malware.
For IT people · Written by AI from 2 sources · Wrong?
What to do
- Keep devices updated and install software only from official stores or the maker’s site.
General advice for this kind of story
Full story timeline · 4 updates
- Fri 30 OctoberMalicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote AccessGBHackers
- Official Claude Code VS Code Extension Compromised to Install Persistent SSH BackdoorThe Hacker News
- Sat 31 OctoberHackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH BackdoorGBHackers
- Mon 2 NovemberMalicious Claude Code Extensions in Cursor Marketplace Install Persistent SSH Backdoors on Windows and macOSGBHackers
Who reported · 2 outlets
GBHackersThe Hacker News
Who and what is in it
Products