🚨 Fake Claude Code Extension Hit Cursor's Marketplace With an SSH Backdoor #AINews

🚨 𝗙𝗮𝗸𝗲 𝗖𝗹𝗮𝘂𝗱𝗲 𝗖𝗼𝗱𝗲 𝗘𝘅𝘁𝗲𝗻𝘀𝗶𝗼𝗻 𝗛𝗶𝘁 𝗖𝘂𝗿𝘀𝗼𝗿'𝘀 𝗠𝗮𝗿𝗸𝗲𝘁𝗽𝗹𝗮𝗰𝗲 𝗪𝗶𝘁𝗵 𝗮𝗻 𝗦𝗦𝗛 𝗕𝗮𝗰𝗸𝗱𝗼𝗼𝗿 Cursor says a tampered copy of Anthropic's Claude Code extension, version 2.1.313, sat in its marketplace on October 29. Anthropic didn't make this version. The attacker's code tried to plant an SSH key and open a reverse tunnel to the attacker's server, but that usually fails without admin rights. It still collected host details and sent them out. Uninstalling isn't enough, since standalone scripts keep running. Check your ~/.ssh/authorized_keys file for a key labeled svc-telemetry. #AI #Cursor #Security #Anthropic ─── 𝗙𝗼𝗹𝗹𝗼𝘄 𝗦𝗜 𝗦𝗽𝗼𝘁𝗹𝗶𝗴𝗵𝘁 𝗳𝗼𝗿 𝗦𝗜/𝗔𝗜 𝗮𝗻𝗱 𝘁𝗲𝗰𝗵 𝗻𝗲𝘄𝘀: 𝗫 · 𝗟𝗶𝗻𝗸𝗲𝗱𝗜𝗻 · 𝗧𝗲𝗹𝗲𝗴𝗿𝗮𝗺 #Shorts