Official Claude Code VS Code Extension Compromised with SSH Backdoor
October 30, 2026
Researchers have identified a trojanized version of the official Anthropic Claude Code extension on the Cursor Marketplace. The compromised extension installs a persistent SSH backdoor on infected hosts, targeting users who utilize Claude Code as a local LLM harness.
HOW THIS AFFECTS YOU
●
builderImmediately audit your VS Code extensions and verify the integrity of any local LLM development tools.
●
policyThis highlights the critical security vulnerabilities inherent in the AI developer tool supply chain.