Sources

• Compromised Claude Code Extension (2.1.313) in Cursor Marketplace Plants Attacker SSH Key and Persistence OX Security · 2026-10-30 13:51 UTC
• Claude Code extension poisoned with persistent SSH backdoor Help Net Security · 2026-10-30 11:15 UTC
• Anthropic hacked to deliver remote access trojan to Claude developer laptops worldwide DoublePulsar · 2026-10-30 10:08 UTC
• Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines Step Security · 2026-10-30 09:23 UTC
• Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor The Hacker News · 2026-10-30 08:55 UTC
• Trojanized Claude Code Extension 2.1.313 in Cursor Marketplace Plants SSH Backdoor Rescana · 2026-10-30 08:31 UTC
• Cursor says up to 5,000 users affected by tampered Claude Code extension Reuters · 2026-10-30 21:58 UTC
• Anthropic just removed one of Claude’s biggest usage limits — but not for everyone The New Stack · 2026-10-30 20:15 UTC
• A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices WIRED · 2026-10-30 20:38 UTC
• Devs Hit by Trojanized Claude Code Extension for Cursor Dark Reading · 2026-10-30 20:34 UTC
• I Tried Claude Duet. Its Best Feature Is Knowing When to Stop Inc.com · 2026-10-30 21:55 UTC
• Anthropic orders AI tool Claude to stop remaking video games Game Developer · 2026-10-30 22:21 UTC

Timeline

• 2026-10-30 08:31 UTC First report: Rescana
• 2026-10-30 22:41 UTC First seen on trends24 (TH)