---
title: "Cursor removes malicious Claude Code extension after SSH backdoor attempt"
type: signal
url: https://frontiernewswire.com/s/cursor-removes-malicious-claude-code-extension-after-ssh-backdoor-2596eaf1
published: 2026-11-02T11:33:58.000Z
byline: "Source: CSO Online"
---

# Cursor removes malicious Claude Code extension after SSH backdoor attempt

Source: CSO Online · Published 2026-11-02 · Canonical: https://frontiernewswire.com/s/cursor-removes-malicious-claude-code-extension-after-ssh-backdoor-2596eaf1

A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ machines, potentially giving attackers remote access to systems holding source code, credentials and other sensitive information. “Between about 2:27am PT and 1:35pm PT today, a maliciously modified version of Anthropic’s Claude Code extension was made available in the Cursor VS Code Extension Marketplace,” Cursor said in a security notice . Cursor removed the compromised versions, 2.1.312 and 2.1.313, after discovering they had been available in its VS Code extension marketplace for approximately 11 hours on October 29. The company said the malicious code attempted to add an attacker-controlled SSH key, enable local SSH access, and establish a reverse tunnel to an attacker-controlled server. “These malicious versions of the extension were not developed by Anthropic,” Cursor added in the notice. The affected ver

In this story: [Claude Code](https://frontiernewswire.com/models/claude-code), [Cursor](https://frontiernewswire.com/models/cursor), [Anthropic](https://frontiernewswire.com/companies/anthropic), [AI security](https://frontiernewswire.com/topics/ai-security)

## Sources

- [Read the original at CSO Online](https://www.csoonline.com/article/4243210/cursor-removes-malicious-claude-code-extension-after-ssh-backdoor-attempt.html)

## Related on Frontier

- [Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor](https://frontiernewswire.com/s/official-claude-code-vs-code-extension-compromised-to-install-d53c08b0)
- [Malicious Claude Code Extension Served in Cursor Supply Chain Attack](https://frontiernewswire.com/s/malicious-claude-code-extension-served-in-cursor-supply-chain-attack-d3db24b3)
- [Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish (Felix Rieseberg/@felixrieseberg)](https://frontiernewswire.com/s/anthropic-says-a-malicious-actor-used-access-to-cursors-marketplace-to-45e77194)
- [Devs Hit by Trojanized Claude Code Extension for Cursor](https://frontiernewswire.com/s/devs-hit-by-trojanized-claude-code-extension-for-cursor-2e3ddd3c)
- [DeepSeek open sources Super-Agent, a coding agent research prototype it says proactively monitors developer group chats for coding issues and suggests solutions (Debby Wu/Bloomberg)](https://frontiernewswire.com/s/deepseek-open-sources-super-agent-a-coding-agent-research-prototype-it-2e22425b)

---

[More Latest Signal](https://frontiernewswire.com/) · [Signals](https://frontiernewswire.com/verified-reporting)