Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems.
The malicious update, version 2.1.313, was distributed under the extension's legitimate publisher identity, prompting Cursor to temporarily shut
This article has been indexed from The Hacker News
Read the original article:
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor