Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
Summary
The official Anthropic Claude Code VS Code extension, hosted on the Open VSX registry, was compromised to deploy a persistent SSH backdoor. The incident was linked to a compromise of the Cursor Marketplace, leading the AI coding platform Cursor to temporarily disable its service to remove the malicious code.
IFF Assessment
FOE
The compromise of a popular code extension to install a backdoor is a significant threat to defenders.
Defender Context
This incident highlights the risks associated with trusted extensions and the potential for supply chain attacks targeting development environments. Defenders should implement strict vetting processes for all installed extensions and monitor for unauthorized SSH activity on developer workstations.