Persistent SSH backdoor

Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor

Researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor on infected hosts. The incident has been traced to the compromise of the Cursor Marketplace, prompting the AI coding platform to briefly take down the service to remove the malware. The attack underscores the growing risk to the AI coding extension supply chain.