Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
Source
phorion.io
Author
_chall
Date
Why it matters
Version 2.1.313 of the Claude Code extension on the Cursor Marketplace carried a persistent SSH backdoor, and IDE extensions run with the user's full file access. Anyone who installed it should check their machines and treat them as compromised.
