Live story Technology Cursor

Cursor removes malicious Claude Code extension after SSH backdoor attempt

Technology

What to know

  • A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ machines, potentially giving attackers remote access to systems holding source code...S1
  • The extension performed host reconnaissance and attempted to create a reverse SSH tunnel. securityweek.com/">SecurityWeek.S2
Timeline · newest first
3h Infoworld

Cursor removes malicious Claude Code extension after SSH backdoor attempt

A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ mac…

3h Csoonline

Cursor removes malicious Claude Code extension after SSH backdoor attempt

A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ mac…

3h Securityweek

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

The extension performed host reconnaissance and attempted to create a reverse SSH tunnel. securityweek.com/">SecurityWeek.

Developing

Cursor removes malicious Claude Code extension after SSH backdoor attempt

3 outlets 3 reports

What to know

  • A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ machines, potentially giving attackers remote access to systems holding source code...S1
  • The extension performed host reconnaissance and attempted to create a reverse SSH tunnel. securityweek.com/">SecurityWeek.S2
Timeline · newest first

Sources · 2 citations

S1 Csoonline 1 report · EN
S2 SecurityweekLead 1 report · EN
Infoworld 1 report · EN