Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours

<p>Cursor has confirmed that malicious Claude Code extension packages were available through its VS Code Extension Marketplace for roughly 11 hours on October 29, 2026. The altered packages targeted Windows and macOS users and attempted to install an SSH backdoor for lasting remote access. According to Cursor’s security notice, the affected versions were Anthropic.claude-code 2.1.312 [&#8230;]</p> <p>The post <a href="https://cybersecuritynews.com/malicious-claude-code-extension-with-cursor/">Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours</a> appeared first on <a href="https://cybersecuritynews.com">Cyber Security News</a>.</p>