Back to Latest SignalTHE HACKER NEWS / SECURITY

Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor

Source: The Hacker News · OCT 30, 2026

Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor on infected hosts. The issue has since been traced to the compromise of the Cursor Marketplace, prompting the AI coding platform Cursor to briefly take down the service to remove the malware. "We identified a security incident

IN THIS STORY
  • Claude Code
  • Anthropic
  • AI security

Sources

  • Read the original at The Hacker News

Related on Frontier

  • Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes Oct 29, 2026
  • Claude Platform release notes — October 29, 2026 Oct 28, 2026
  • Claude Platform release notes — October 28, 2026 Oct 27, 2026
  • Hugging Face malware campaign returns to hijack GPUs for crypto mining Oct 29, 2026
MORE LATEST SIGNALSIGNALS