Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
Summary
The official Claude Code VS Code extension was compromised in a supply-chain attack that installed a persistent SSH backdoor on affected machines, highlighting ongoing risks in the software distribution ecosystem.
Similar Articles
Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
Phorion detected a backdoor in the official Claude Code for VS Code extension (v2.1.313) on the Cursor Marketplace that installs a persistent SSH backdoor and drops attacker SSH keys across macOS, Linux, and Windows. Cursor has removed the release, and organizations are urged to audit affected environments immediately.
Backdoors in Claude Code for VS, Cursor official extensions
Report of backdoors discovered in the Claude Code for VS Code and Cursor editor extensions, highlighting a supply-chain security incident affecting popular AI coding tools.
Backdoored Claude Code extension in Cursor's marketplace may have reached up to 5,000 users
Backdoored builds of the Anthropic.claude-code extension briefly appeared in Cursor's marketplace, potentially reaching up to 5,000 users via auto-update, installing SSH backdoors and persistence mechanisms that survive simple updates or uninstallation.
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Anthropic 的官方 Claude Code VS Code 扩展在 Cursor 市场被植入后门近 12 小时，恶意版本 2.1.313 通过官方账户分发，最多影响约 5,000 名开发者，可安装持久化 SSH 后门并访问本地文件与源代码。Anthropic 至今未向客户发布公开通知。
A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
A supply chain attack placed a malicious Anthropic Claude Code extension in Cursor's marketplace for about 11 hours, potentially affecting up to 5,000 developers with a backdoor implant. Anthropic and Cursor said their systems were not compromised, and the malware's design flaws prevented it from fully establishing itself on most targets.