Claude Code Extension Trojanized on Cursor Marketplace with SSH Backdoor Add a tag
Executive Summary On 29 October 2026, the official Anthropic Claude Code extension was compromised on the Cursor Marketplace and used to install a persistent SSH backdoor on infected hosts. The issue was traced to a compromise of the Cursor Marketplace, and Cursor briefly took down the service to remove the malware. Cursor says the incident…
Read More