URL has been copied successfully!
Malicious Claude Code Extensions in Cursor Marketplace Install Persistent SSH Backdoors on Windows and macOS
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

Malicious Claude Code Extensions in Cursor Marketplace Install Persistent SSH Backdoors on Windows and macOS


Tags: , , , , ,

Malicious Claude Code extensions distributed through Cursor’s VS Code The Extension Marketplace tried to create persistent SSH backdoors on Windows and macOS developer systems. The affected packages were the Anthropic.claude-code versions 2.1.312 and 2.1.313, which were available on October 29, 2026, between approximately 2:27 a.m. and 1:35 p.m. Cursor stated that Anthropic did not develop […] The post Malicious Claude Code Extensions in Cursor Marketplace Install Persistent SSH Backdoors on Windows and macOS appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

First seen on gbhackers.com

Jump to article: gbhackers.com/malicious-claude-code-extensions-in-cursor-marketplace/

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. TDL001 – Cybersecurity Explained: Privacy, Threats, and the Future – Chester Wisniewski
  2. Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware Threat
  3. Malicious NPM Packages Spread PylangGhost RAT in Supply Chain Attack
  4. Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor