Official Claude Code VS Code Extension Compromised for SSH Backdoor
The official Anthropic Claude Code extension was compromised on Open VSX to install an SSH backdoor. Cursor platform briefly took down service.
Cybersecurity researchers have disclosed a significant security incident involving the official Anthropic Claude Code extension. The extension was compromised on the Open VSX registry with the malicious intent of installing a persistent SSH backdoor on infected host machines.
- Official Claude Code extension was compromised.
- Attack resulted in persistent SSH backdoor installation.
- Security issue tracked back to the Cursor Marketplace.
Cursor Marketplace Breach
The incident has been directly traced to the compromise of the Cursor Marketplace. Following the discovery, the AI coding platform Cursor had to temporarily take down its service in order to thoroughly remove the malware and secure the platform infrastructure.
Impact on Development Security
Supply chain attacks targeting developer tools and extension registries continue to pose a serious threat to the software engineering ecosystem. Ensuring the integrity of code editors and marketplace extensions is critical for maintaining secure development workflows.
Source: The Hacker News
