> TritonInfoSec News
Home / Nov 01, 2026 / Story
0
#5 The Hacker News general October 30, 2026 at 08:55 UTC

Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor

By [email protected] (The Hacker News)

AI Summary

The official Anthropic Claude Code extension on the Open VSX registry and the Cursor Marketplace was backdoored for nearly 12 hours, delivering a persistent SSH backdoor to infected developer machines. Attackers gained access via a compromised verified Cursor account; the mechanism of that compromise remains unknown. The incident highlights supply-chain risk in AI-assisted development tooling, where developers implicitly trust extensions from ostensibly verified publishers.

Read full article → https://thehackernews.com/2026/10/official-claude-…

Relevance score: 87.0/100

# More from November 01

  1. 1
    $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor SecurityWeek
  2. 2
    Hackers steal $6.3 billion from Binance in record crypto heist Ars Technica Security
  3. 3
    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access The Hacker News
  4. 4
    China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days CyberScoop
  5. 6
    Max-Severity GitLab Vulnerability Exploited Against Alpine Linux SecurityWeek
  6. 7
    WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours The Hacker News
  7. 8
    Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis The Hacker News
  8. 9
    PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress SecurityWeek
  9. 10
    Chainalysis discloses data breach from "offensive agentic techniques" BleepingComputer