News
cybersecurity Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials - CyberPress threat-intel New Kairos DDoS Botnet Hijacks Linux Devices to Overwhelm Servers With Thousands of TCP Connections - GBHackers threat-intel DarkSword iOS Exploit Chain Bypasses Safari Sandbox and Steals Apple Notes Data - GBHackers cybersecurity Drupal warns of critical Commerce Core flaw exploited in attacks - BleepingComputer threat-intel New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs - GBHackers cybersecurity $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack - SecurityWeek cybersecurity Max-Severity GitLab Vulnerability Exploited Against Alpine Linux - SecurityWeek cybersecurity Binance links $6.3 billion crypto theft to compromised DevOps laptop - BleepingComputer cybersecurity Hackers Compromise Claude Code Extension in Cursor Marketplace to Install Persistent SSH Backdoor - CyberPress ai Eating disorders are on the rise. GLP-1s could make things worse. - MIT Technology Review cybersecurity Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor - The Hacker News cybersecurity Binance Halts Deposits and Withdrawals After Security Breach, Vows to Cover All Losses - CyberPress ai Anthropic Security Breach Exposes Internal Systems in Research Test - The Cryptonomist - Anthropic - Claude AI cybersecurity Hackers Target Binance Hot Wallets in $6.36 Billion Crypto Theft, North Korea Suspected - CyberPress cybersecurity Researchers Discover AI Relay Services That Disable Sandboxing and Monitoring in Popular Coding Assistants - CyberPress
1 / 15
All news ›
Cybersecurity

Hackers Compromise Claude Code Extension in Cursor Marketplace to Install Persistent SSH Backdoor

CyberPress ·

Hackers compromised version 2.1.313 of the Claude Code extension distributed through the Cursor Marketplace, embedding malicious JavaScript that establishes persistent SSH access on developer machines. Published on October 29, 2026, the tampered extension identifies itself as anthropic.claude-code and retains legitimate functionality while executing a hidden loader before normal initialization. According to OpenSourceMalware’s updated account, Cursor […] The post Hackers Compromise Claude Code Extension in Cursor Marketplace to Install Persistent SSH Backdoor appeared first on Cyber Security News .

Continue on CyberPress ↗ ‹ All news Get the newsletter

The summary and image come from CyberPress; the image is shown from their website.