Malicious Claude Code extension on Cursor planted SSH backdoors
Teaser from the source
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on Malicious
Other advisories
- MediumCVE-2026-121520Malicious client could set xattr value outside of BuildKit state directory
- Criticalghsa:GHSA-vghh-5rfx-xhq8LXD has arbitrary file read+write on host via rootfs/ symlink in malicious image
- Criticalghsa:GHSA-jpf8-86f3-wp38LXD has arbitrary file read+write on host via templates/ symlink in malicious image
- CriticalCVE-2026-48755LXD host escapes via malicious images, backup compression, and project-restriction bypasses (GHSA-jpf8 / GHSA-9j25 / GHSA-vghh / GHSA-pjff / GHSA-fmc8 / GHSA-47w9 / GHSA-7mr3 / GHSA-qx75)
- Highosv:MAL-2026-18657Malicious code in strands-aidr (PyPI)
- Highosv:MAL-2026-18651Malicious code in @secauditb20y/sec-test-b1 (npm)
- Highosv:MAL-2026-18650Malicious code in @secaudita10x/sec-test-a1 (npm)
- Highosv:MAL-2026-18654Malicious code in heheheshsds (npm)
Other news entries
- Tensorlake: attacker reached engineering GitHub via vendor-hosted sandboxes after unrotated env varsBreachpwn.watch
- Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' ComputersNewsThe Hacker News
- CPython flaw exposes AI inference servers to sandbox escape attacksNewsCSO Online
- Email threat landscape: Q3 2026 trends and insightsNewsMicrosoft Threat Intelligence
- GhostMap Android flaw lets malicious app trigger persistent boot loopNewsBleepingComputer
- The Sandbox Fights Back: Joe Security Launches Adaptive DetonationNewsCSO Online
- Attackers turned OpsShield’s trusted update channel into a supply-chain attackNewsCSO Online
- Google Calendar phishing campaign hijacks sessions, bypasses MFANewsBleepingComputer
ID