Cursor removes fake Claude Code extension following SSH backdoor attempt
Tool · CSO Online · stat: — Cursor removed a fake Claude Code extension from its marketplace after security analysts detected a malicious script attempting to establish an SSH backdoor on developer…
Tool · CSO Online · stat: —
Cursor removed a fake Claude Code extension from its marketplace after security analysts detected a malicious script attempting to establish an SSH backdoor on developer workstations. The incident highlights expanding supply chain attack vectors targeting third-party AI editor extensions.
Third-party AI extensions are becoming prime targets for supply chain exploits Engineering teams using AI coding tools must audit active extensions and restrict unverified marketplace installs.
Every claim ties to a primary source. See our methodology.