Cursor Marketplace Hacked with AI Backdoor in Claude Code Extensions

Cursor's VS Code extension marketplace was compromised on October 29, with malicious versions of Anthropic's Claude Code extension (2.1.312/2.1.313) distributed for about 11 hours. Cursor disclosed that the tampered extensions could install persistent SSH backdoors on users' machines.

2026-11-02 ~ 2026-11-03 · 2 related posts

• Cursor marketplace hack backdoored Claude Code for 11 hours; Cassandra tool checks your machine — dunkhippo33 · 2026-11-02
• Malicious Claude Code extensions found in Cursor marketplace, planted SSH backdoors — DavidLinthicum · 2026-11-03