Anthropic VS code extension on Cursor backdoored for nearly 12 hours
What's happening
The official Anthropic 'Claude Code' VS Code extension on the Cursor Marketplace was compromised and used to install a persistent SSH backdoor on infected hosts, with the tampered extension active for nearly 12 hours. Anthropic (Claudeshop) says the intrusion came from a 'malicious actor' and denies that the company itself caused the compromise. It remains unknown how attackers gained access to Anthropic's verified Cursor account.
Why it's trending
Multiple security outlets and researchers reported the backdoor and the account-access mystery within the same news cycle.
SignalNewly emerging, confirmed across 2 independent source types.
Story volume
Stories per dayAngles you could write
If you trust a verified Cursor badge, rethink that: Anthropic's Claude Code extension was backdoored for almost 12 hours and verification didn't stop a persistent SSH implant.
+2 more angles for this topic with an account — all it takes is your email.
Original sources3
- Anthropic VS code extension on Cursor backdoored for nearly 12 hours
It's still unknown how attackers got access to Anthropic's verified Cursor account.
Ars Technica AIOct 30 - Anthropic: That Claude Code extension compromise… couldn't be us
Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor
The RegisterOct 30 - Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Cursor Marketplace to install a persistent SSH backdoor on infected hosts. Two sources: Looks legit, post this to warn users who use Claude Code as
r/LocalLLaMAOct 30
More rising in AI & Tech
- Sam Altman says it’s better for RAM to be in a data center than on your deskSurging6.0Surging6.0 momentum
- Google’s first data center satellite is online and writing poetryClimbing3.1Climbing3.1 momentum
- Cracks are emerging in the AI spending boomClimbing2.0Climbing2.0 momentum
- Google announces Gemini 4 Carbon, its latest frontier AI model that you can't useSurging6.0Surging6.0 momentum
- Google alters its cloud playbook, enlisting partners to sell more AI chipsClimbing2.3Climbing2.3 momentum
- Google admits AI search makes less money, but it's fixing that with more adsClimbing2.8Climbing2.8 momentum