Tech31 Okt 2026
Trojanized Claude Extension Plants Persistent Backdoor on Thousands of Developer Machines
A malicious supply chain attack injected an SSH backdoor into the official Claude Code extension across alternative developer marketplaces, impacting up to 5,000 systems running the AI coding editor Cursor. The compromised package harvested sensitive system data and established reverse tunnels, though operational blunders by the attacker averted widespread unauthorized remote logins. Both Anthropic and Cursor have moved to contain the incident, but security analysts warn that simple uninstalls will not remediate already infected machines.
By NeuraFeed