Backdoor Found in Claude Code VS Code Extension on Cursor Marketplace A malicious update of the official Claude Code VS Code extension on the Cursor Marketplace installs a persistent SSH backdoor on macOS, Linux, and Windows. Learn how it works, how to detect it, and what to do now. AI & LLMs securityvscodeextensions Nov 1, 2026 · 7 min
