Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems. The malicious update, version 2.1.313, was distributed under the extension's legitimate publisher identity, prompting Cursor to temporarily shut
What happened
Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems. The malicious update, version 2.1.313, was distributed under the extension's legitimate publisher identity, prompting Cursor to temporarily shut
Why it matters
The development may change operating conditions or market expectations around Anthropic. Further confirmation and measurable outcomes matter.
Affected entities
View evidence
1 reports · 1 original report · 1 independent
- The Hacker NewsPrimary source · Supports · EN · 100%Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor ↗
Claims
- Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor Observed
Conflicts
No material conflict detected in the available evidence.
Timeline
- First reported
- Unverified · 61/65%
Market move following event
Market reaction is not yet available for this asset and time window.