What happened in this Tech story?

A tampered Claude Code extension reached Cursor’s marketplace as version 2.1.313 and attempted to establish a persistent SSH backdoor, with Anthropic saying it neither built nor published the malicious copy.

What is a key fact in this story? (1)

**Claude Code**’s trojanized extension was distributed through the Cursor Marketplace as a legitimate update; researchers said version 2.1.313 attempted to install a persistent SSH backdoor on affected systems.

What is a key fact in this story? (2)

**Anthropic** said a malicious actor used access to Cursor’s marketplace to publish the “tampered” copy and that Anthropic did not build or publish it.

📎 SkimNews has covered Anthropic 571+ times · see the file →

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor — SkimNews

By The Hacker News · Summarized & edited by Kapil Samant · 2026-10-30

Get the Tech newsletter

Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.

Claude Code’s trojanized extension was distributed through the Cursor Marketplace as a legitimate update; researchers said version 2.1.313 attempted to install a persistent SSH backdoor on affected systems.
Anthropic said a malicious actor used access to Cursor’s marketplace to publish the “tampered” copy and that Anthropic did not build or publish it.

Why it matters: Version 2.1.313 made Cursor Marketplace the delivery path for a persistent SSH backdoor attempt on affected systems. Anthropic’s statement that it neither built nor published the tampered copy locates the disclosed problem in marketplace access and publication controls, where the package was presented as legitimate.