{"data":{"id":"22ab4494-5490-46af-a874-6e1cadb78e5f","title":"Inside a malicious Claude Code-branded extension and its persistent SSH backdoor","summary":"Cursor reported that a tampered copy of the Claude Code extension (anthropic.claude-code, versions 2.1.313 and 2.1.312) was served in the Cursor extension marketplace for a few hours on October 29, 2026. The injected JavaScript loader runs when the extension module loads and attempts to add an attacker-controlled SSH key, enable the local SSH service, set up reverse SSH forwarding, configure persistence, and report host details. Microsoft states that the Visual Studio Marketplace and npm packages were not affected.","solution":"Organizations should identify systems that installed or automatically updated to this version from the Cursor marketplace, preserve evidence, remove confirmed malicious artifacts, review endpoint and network telemetry, and rotate credentials or revoke sessions when investigation indicates exposure.","labels":["security","industry"],"sourceUrl":"https://www.microsoft.com/en-us/security/blog/2026/10/30/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor/","publishedAt":"2026-10-31T01:02:57.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code","Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-31T01:02:57.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}