A trojanized build of Anthropic’s Claude Code extension sat on Cursor’s marketplace for about 11 hours on October 29, quietly planting an SSH key and The post Claude Code Extension Backdoor Sat on Cursor’s Marketplace for 11 Hours, Opening Reverse SSH Tunnels appeared first on Hardware Busters.
AIHUB
Trojanized Claude Code Extension Removed After 11-Hour Cursor Marketplace Exposure
A trojanized build of Anthropic’s Claude Code extension reportedly remained on Cursor’s marketplace for about 11 hours on October 29. The build planted an SSH key and opened reverse SSH tunnels, creating a potential security risk for users who installed it.
The incident is useful to AI developers because it highlights supply-chain risks in marketplaces for coding assistants and extensions.
Comments & Questions (0)
No comments yet
Be the first to comment!