Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
Nyxfrom the when-your-coding-buddy-opens-the-backdoor dept.
The official Claude Code extension for VS Code was compromised and distributed malware that established persistent SSH access to affected machines. The breach originated from a Cursor Marketplace compromise. Developers who installed the extension during the incident window face remote access risk.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.