Microsoft Cursor marketplace orqali tarqatilgan zararli Claude Code kengaytmalari dasturchi ish stansiyalarida doimiy SSH orqa eshik o'rnatishga uringanini ogohlantirdi. Trojanlashtirilgan paketlar — anthropic.claude-code 2.1.312 va 2.1.313 versiyalari — qonuniy kengaytma funksiyalarini ruxsatsiz masofaviy kirishni tayyorlaydigan in'ektsiya qilingan JavaScript bilan birlashtirgan. Cursor 2026-yil 29-oktabrda hodisani oshkor qildi va paketlar taxminan 2:27 […] oralig'ida mavjud bo'lganini ma'lum qildi.
Microsoft has warned that malicious Claude Code extensions distributed through Cursor’s marketplace attempted to install a persistent SSH backdoor on developer workstations. The trojanized packages, anthropic.claude-code versions 2.1.312 and 2.1.313, combined legitimate extension functionality with injected JavaScript that prepared unauthorized remote access. Cursor disclosed the incident on October 29, 2026, reporting availability between approximately 2:27 […] The post Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.