A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ machines, potentially giving attackers remote access to systems holding source code, credentials and other sensitive information.
AIHUB
Cursor removes malicious Claude Code extension after SSH backdoor attempt
A malicious version of Anthropic's Claude Code extension on the Cursor marketplace attempted to install a persistent SSH backdoor on developers' machines, potentially granting attackers remote access to source code and credentials. Cursor removed the extension after the discovery. The incident highlights supply-chain risks in AI coding tool marketplaces.
This is a concrete, recent security incident involving AI tooling that informs developers about marketplace risks and the importance of extension vetting.
Comments & Questions (0)
No comments yet
Be the first to comment!