Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours
Cursor has confirmed that malicious Claude Code extension packages were available through its VS Code Extension Marketplace for roughly 11 hours on October 29, 2026. The altered packages targeted Windows and macOS users and attempted to install an SSH backdoor for lasting remote access. According...