The Hacker News · 10/30/2026

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

Malicious Claude Code extension v2.1.313 distributed via Cursor Marketplace installed persistent SSH backdoors on ~5,000 developer systems before removal.

Read original coverage