TechTrending across 2 sourcesBleepingComputer2h ago
Malicious Claude Code extension on Cursor planted SSH backdoors
TL;DRFake Claude extension in Cursor marketplace installed SSH backdoors on developer machines.
Why it matters: Supply chain attacks on dev tools can compromise production systems and sensitive infrastructure at scale.
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...]
Read full articleSource: BleepingComputer · Opens in new tab