A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A malicious version of Anthropic's Claude Code extension for VS Code and Cursor was distributed through official marketplaces ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

The official Claude Code extension on the Cursor development environment’s marketplace contained an SSH backdoor.

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

A malicious Claude Code extension on Open VSX carried a hidden backdoor, putting developers' machines at risk.

Cursor reported on October 29, 2026 that a maliciously modified build of the Claude Code extension, Anthropic.claude-code 2.1.313, was available in its extension marketplace and tries to install a ...

Researchers say developers using Visual Studio Code (VS Code) with Claude AI may have been exposed to a serious security ...

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

Microsoft is increasingly treating Claude as a first-class option across dev tooling and AI products. For one prominent example of that trend, Microsoft's Visual Studio Code editor is extending Claude ...