Cursor has confirmed that malicious Claude Code extension packages were available through its VS Code Extension Marketplace for roughly 11 hours on October 29, 2026. The altered packages targeted Windows and macOS users and attempted to install an SSH backdoor for lasting remote access. According to Cursor’s security notice, the affected versions were Anthropic.claude-code 2.1.312 […]
This article has been indexed from Cyber Security News
Read the original article:
Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours