Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor

Researchers disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry, installing a persistent SSH backdoor on infected hosts. The incident was traced to a compromise of the Cursor Marketplace, prompting Cursor to temporarily take down the service to remove the malware. Users are advised to check for unauthorized SSH keys.