AI Security
Malicious Claude Code extension on Cursor planted SSH backdoors
A tainted extension was available through Cursor’s marketplace for about 11 hours on October 29.
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors.
B
BleepingComputer
Source
BleepingComputer
AI Analysis
Generated insight by OnAirToday AI
The incident shows how a compromised developer-tool extension can put users at risk through a marketplace they rely on. The potential exposure of up to 5,000 developers highlights the reach of a distribution window lasting just hours.
Powered by AI • Not a substitute for human analysisMore Insights →
Share
Filed under:AI Security
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.