Malicious Claude Code Extension Slipped an SSH Backdoor Into Cursor's Marketplace - XenoSpectrum

A malicious Claude code extension has been discovered in Cursor's marketplace, containing an SSH backdoor that compromises user systems. The extension, which appeared legitimate, actually created a security vulnerability allowing unauthorized remote access.

Security Risk

The discovery underscores the growing security challenges in code extension marketplaces, where malicious actors can disguise harmful code as legitimate tools. Users who installed the affected extension may have their systems compromised.