Wire flash
Cursor removes malicious Claude Code extension after SSH backdoor attempt
Editorial responsibility
- No named human review is recorded for this page.
- Source reporting is collected, normalized, translated or condensed automatically when needed.
- Automatically published source-backed update
Cursor has removed a malicious extension related to Claude Code following an attempted SSH backdoor, according to a security report referenced in the post. The item identifies the extension as malicious and links the removal to an SSH backdoor attempt, indicating a security response by Cursor. No further details on the extension's origin, the scope of affected users, or the timing of the removal are provided in the source text.
Source report
Cursor has removed a malicious Claude Code extension after it attempted to establish an SSH backdoor.
Source: securitytc.com/TW8d1z | https://t.co/yDdt2bt6hX
Source
evanderburgNeutral / independent
Part of this Story
Anthropic's Claude Code extension shipped with SSH backdoor via Cursor marketplace