Malicious Claude Code Extension With SSH Backdoor Slips Into Cursor Marketplace for 11 Hours
RedSide Security October 31, 2026 Cybersecurity 6 views
Cursor confirmed that tampered Claude Code extension packages were available in its VS Code marketplace for about 11 hours on October 29, 2026, attempting to install an SSH backdoor on Windows and macOS developer machines.
supply chain attack
Claude Code
Cursor
malicious package
SSH backdoor
developer tools
extension marketplace
Continue reading: Malicious Claude Code Extension With SSH Backdoor …
