thehackernews.com • 4h
Trojanized Anthropic Claude Code Extension v2.1.313 Delivers SSH Backdoor via Cursor Marketplace
On October 29, 2026, a trojanized Anthropic Claude Code extension (ID: anthropic.claude-code), versions 2.1.312 and 2.1.313, was distributed via the Cursor Marketplace and Open VSX under a compromised legitimate publisher identity. The malicious VSIX inserted an attacker-controlled SSH key, established uninstallation-resistant persistence through startup scripts, enumerated host information, and opened a reverse SSH tunnel targeting macOS Apple Silicon and Linux. Anthropic disavowed the build; no CVE was assigned, evading CVE-driven scanners. Up to 5,000 developers face persistent remote access and lateral movement risk.