Official Claude Code extension compromise
Sentiment Mix
Geography
Expert Signals
Hacker News
source • 3 mentions
Anthropic - Google News
source • 2 mentions
meetpateltech
author • 1 mention
dsr_
author • 1 mention
_chall
author • 1 mention
AI-Generated Claims
Generated from linked receipts; click sources for full context.
Malicious Claude Code Extension (2.1.313) in Cursor Marketplace Plants Attacker SSH Key and Persistence - OX Security.
Supported by 2 stories
Summary
**Summary:** A malicious extension for the official Claude code has been found, compromising it and allowing an attacker to plant their SSH key and establish persistence. **Why It Matters:** This discovery highlights vulnerabilities in software updates and suggests that developers need better security practices to prevent such compromises.
Related Events
Hackers hijacked a Claude Code extension, exposing yet another new AI security risk - Fast Company
LLMs • 10/30/2026
Anthropic: That Claude Code extension compromise… couldn't be us - The Register
LLMs • 10/30/2026
Cursor Discloses Tampered Claude Code Add-On Hit Up to 5,000 - FourWeekMBA
LLMs • 10/30/2026
Hackers are using GitHub to push fake ChatGPT and Claude apps - IT Pro
LLMs • 10/30/2026
Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data - CyberSecurityNews
LLMs • 10/30/2026
Causality Chain
Preceded By