Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours

Cursor has confirmed that malicious Claude Code extension packages were available through its VS Code Extension Marketplace for roughly 11 hours on October 29, 2026. The altered packages targeted Windows and macOS users and attempted to install an SSH backdoor for lasting remote access. According to Cursor’s security notice, the affected versions... Weiterlesen: Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was…