Security · 31 October 2026
Anthropic's Claude Code Extension Trojanized on Cursor Marketplace with Persistent SSH Backdoor
A trojanized version of Anthropic's Claude Code extension (v2.1.313) was distributed via the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor. Cursor temporarily shut the marketplace after the discovery.
Why it matters
Reevaluate extension vetting; the trojanized Claude Code 2.1.313 can install a persistent SSH backdoor.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 31 Oct →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.