Supply chain attack delivers persistent SSH backdoors via malicious Cursor extension
In short: A tampered version of the 'Claude Code' extension was distributed through the Cursor extension marketplace, allowing attackers to install persistent SSH reverse tunnels on developer machines. The malware, active for several hours on October 29, 2026, attempted to steal environment configuration metadata and create unauthorized remote access points.
This summary was generated automatically by AI from Microsoft Security's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.
What changed?
- 1Injected malicious loader code into Claude Code extension versions 2.1.312 and 2.1.313.
- 2Added attacker-controlled public keys to ~/.ssh/authorized_keys.
- 3Established reverse SSH tunnels to enable remote unauthorized access.
- 4Configured platform-specific persistence mechanisms (LaunchAgents, cron, Scheduled Tasks).
Why it matters
This incident highlights the significant risks associated with third-party marketplaces for development tools. Even if the underlying AI service (e.g., Anthropic) is secure, the delivery channel for IDE plugins can be compromised to gain persistent access to high-privilege developer workstations.
What it means for AI agents and contact centers
If your team uses Cursor or similar IDE environments, scan all development machines for the 'svc-telemetry' SSH key, suspicious LaunchAgents (com.apple.sysmond.plist), or unrecognized Scheduled Tasks. Review your internal security policy regarding IDE extension installations and consider restricting them to approved publishers or introducing an installation delay policy.
Sources
- Microsoft SecurityOfficialPrimary sourceOriginal article →„Inside a malicious Claude Code-branded extension and its persistent SSH backdoor“31 Oct 2026, 03:02
- Published by source
- 31 Oct 2026, 03:02
- Found by our system
- 31 Oct 2026, 04:03
- Summary generated
- 31 Oct 2026, 04:03
This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy