What happened in this Tech story?

A malicious update to the official Claude Code extension was distributed via the Cursor Marketplace, attempting to install a persistent SSH backdoor on users' systems.

What is a key fact in this story? (1)

**Anthropic's official Claude Code extension** was compromised in version 2.1.313, which was trojanized to deploy a persistent SSH backdoor on developer machines.

What is a key fact in this story? (2)

**Cursor Marketplace** hosted the malicious update, distributing it as a legitimate release before researchers identified and disclosed the compromise.

📎 SkimNews has covered Anthropic 568+ times · see the file →

Claude Code Extension Trojanized on Cursor Marketplace — SkimNews

By The Hacker News · Summarized & edited by Kapil Samant · 2026-10-30

Get the Tech newsletter

Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.

Anthropic's official Claude Code extension was compromised in version 2.1.313, which was trojanized to deploy a persistent SSH backdoor on developer machines.
Cursor Marketplace hosted the malicious update, distributing it as a legitimate release before researchers identified and disclosed the compromise.
Cybersecurity researchers discovered the trojanized extension and disclosed the attack, warning developers who installed version 2.1.313 to immediately audit their systems.
The malicious update attempted to establish remote access via SSH, enabling potential long-term surveillance or data exfiltration from affected environments.

Why it matters: Developers using the Cursor Marketplace are at direct risk of unauthorized access, as the trojanized extension could allow attackers persistent control over systems. The breach undermines trust in AI tooling supply chains, where trusted vendors like Anthropic are assumed secure by default.