Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
What happened
The official Anthropic Claude Code extension for VS Code was compromised on the Open VSX registry. Attackers used this trusted extension to install a persistent SSH backdoor on infected machines. The breach was traced back to the compromise of the Cursor Marketplace, a platform for AI coding tools. Cursor responded by briefly taking down the marketplace to remove the malicious software and contain the incident.
The risk
This kind of infiltration exposes the real danger in code supply chains relying on third-party marketplaces. The SSH backdoor grants attackers ongoing remote access, which can lead to data theft, lateral movement across systems, and persistent control without user detection. Developers and operators using the compromised extension face heightened risk of covert exploitation, long after the initial installation.
Why it matters
The incident weakens trust in AI coding tools deployed via third-party marketplaces. It forces builders and organizations to rethink how they vet and source extensions and plugins, especially those integrated into critical development environments. The risk of persistent backdoors raises the cost of risk management and forces tighter scrutiny on software provenance. Failure to catch such compromises quickly can lead to costly breaches and operational disruption.
Who should pay attention
Developers, IT security teams, DevOps operators, and AI platform vendors need to monitor their use of third-party extensions closely. Organizations relying on AI-enhanced coding tools must audit installed extensions and ensure they come from reputable, secured sources. Marketplace operators like Cursor must invest in stronger security postures to prevent similar supply chain intrusions.
What to watch next
Look for follow-up disclosures on the full impact and remediation steps from the Cursor platform and Anthropic. Watch for tightened security controls in AI coding tooling marketplaces to prevent extension-level compromises. Operators should track new policies or tools aimed at verifying extension integrity before installation in developer environments.
AI Quick Briefs Editorial Desk