{"id":7180,"date":"2026-10-29T16:00:00","date_gmt":"2026-10-29T16:00:00","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor"},"modified":"2026-10-29T16:00:00","modified_gmt":"2026-10-29T16:00:00","slug":"cursor-marketplace-malicious-claude-code-extension-ssh-backdoor","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor","title":{"rendered":"Cursor Marketplace Served a Malicious Claude Code Extension With an SSH Backdoor"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">For about eleven hours on October 29, 2026, Cursor&#8217;s own extension marketplace handed developers a trojan. In a <a href=\"https:\/\/cursor.com\/blog\/claude-code-extension-security-notice\" target=\"_blank\" rel=\"noreferrer noopener\">security notice<\/a> published that day and updated on October 30, Cursor said &#8220;a maliciously modified version of Anthropic&#8217;s Claude Code extension&#8221; \u2014 Anthropic.claude-code versions 2.1.312 and 2.1.313 for Windows and macOS \u2014 was available in the Cursor VS Code Extension Marketplace from about 2:27 a.m. to 1:35 p.m. PT. &#8220;These malicious versions of the extension were not developed by Anthropic.&#8221;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> Tampered Claude Code extension builds 2.1.312 and 2.1.313, served from Cursor&#8217;s marketplace, not from Anthropic&#8217;s official distribution.<\/li><li><strong>Window:<\/strong> About 2:27 a.m. to 1:35 p.m. PT on October 29, 2026.<\/li><li><strong>Payload:<\/strong> Collects host and user details and tries to install a persistent SSH backdoor, including an authorized-keys entry labeled <code>svc-telemetry<\/code>, a LaunchAgent or scheduled task, and a reverse tunnel to an attacker server. Cursor later had that server taken offline.<\/li><li><strong>Scale:<\/strong> <a href=\"https:\/\/www.theverge.com\/ai-artificial-intelligence\/1023096\/cursor-says-around-5000-people-may-have-installed-a-malicious-claude-code-extension\" target=\"_blank\" rel=\"noreferrer noopener\">The Verge<\/a> reported that Cursor said around 5,000 people may have installed the malicious extension.<\/li><li><strong>Check:<\/strong> Search <code>~\/.ssh\/authorized_keys<\/code> (and the Windows equivalents) for <code>svc-telemetry<\/code>. Uninstalling the extension is not enough; the payload drops standalone persistence.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What the malware tried to do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cursor&#8217;s notice is unusually detailed. The extension collected hostname, username, OS, architecture, home directory, environment-variable names, working directories, configured Git email, and public IP, and reported them to the attacker. It tried to add an attacker-controlled SSH key, enable the local SSH service, and open a reverse SSH tunnel, then persist that tunnel with a macOS LaunchAgent (<code>com.apple.sysmond<\/code>) or a Windows scheduled task named SysMon, retrying about every 60 seconds.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cursor also says the most damaging step often failed: turning on the local SSH service needs administrator rights, which the extension does not have on most Mac and Windows hosts. &#8220;On those hosts the step fails and the attacker could not have logged in through the tunnel.&#8221; That is not a clean bill of health. Cursor is clear that the extension still added the attacker&#8217;s SSH key, installed persistence, and sent host details, and it tells everyone in the window to follow the remediation steps anyway.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cursor removed the builds, shut the marketplace down &#8220;out of an abundance of caution,&#8221; audited other extensions (it says it found no other tampering), rotated keys, rebuilt the marketplace, and worked with the attacker&#8217;s hosting provider to take the command-and-control server offline. Official Anthropic distribution and, by later reporting, other marketplaces were not the source of these builds.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you installed or updated Anthropic.claude-code 2.1.312 or 2.1.313 from the Cursor marketplace in that window:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Run Cursor&#8217;s check for the <code>svc-telemetry<\/code> key, then its remediation scripts (macOS as the affected user, Windows as Administrator). The scripts remove the extension, persistence, tunnel processes, and the key.<\/li><li>Isolate any host with evidence of payload execution. Uninstalling the extension alone may leave <code>~\/.config\/.smt<\/code>, LaunchAgents, scheduled tasks, or startup scripts in place.<\/li><li>Rotate credentials and sessions that could be reached from an affected host, from a clean machine.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cursor published indicators of compromise, including VSIX hashes for both versions and platforms, the attacker address 134.209.82.225, and the <code>svc-telemetry<\/code> key fingerprint. <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/10\/30\/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor\/\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft October 30 analysis<\/a> covers the same incident in more technical depth.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This was a marketplace compromise, not a bug in Claude Code&#8217;s upstream source. For developers, the lesson is brutal and familiar: the channel you use to install an official-looking editor extension is part of your trusted computing base. For Cursor, the eleven-hour window and the reported affected-user count make this one of the most serious AI-tool supply-chain incidents of the autumn. Even where the reverse-login step failed, key theft and persistence are enough to treat a hit machine as an incident, not a close call.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This i10x report is based on Cursor&#8217;s October 29\u201330 security notice, The Verge&#8217;s report of Cursor&#8217;s affected-user figure, and Microsoft&#8217;s October 30 technical blog. i10x did not analyze the VSIX files.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/cursor.com\/blog\/claude-code-extension-security-notice\" target=\"_blank\" rel=\"noreferrer noopener\">Cursor: Security notice on malicious Anthropic.claude-code 2.1.312 and 2.1.313<\/a><\/li><li><a href=\"https:\/\/www.theverge.com\/ai-artificial-intelligence\/1023096\/cursor-says-around-5000-people-may-have-installed-a-malicious-claude-code-extension\" target=\"_blank\" rel=\"noreferrer noopener\">The Verge: Cursor says around 5,000 people may have been affected<\/a><\/li><li><a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/10\/30\/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor\/\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Security Blog: Inside the malicious Claude Code-branded extension<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Cursor says that on October 29, 2026, between about 2:27 a.m. and 1:35 p.m. PT, malicious Anthropic.claude-code versions 2.1.312 and 2.1.313 were available in its VS Code extension marketplace and attempted to install a persistent SSH backdoor. The official Anthropic builds were not the source. Cursor pulled the versions and shut the marketplace down while it rebuilt it.<\/p>\n","protected":false},"author":2,"featured_media":7179,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"critical","_nx_sec_affected":"Cursor marketplace \/ Claude Code extension","_nx_sec_status":"mitigated","_nx_sec_kicker":"DANGER: A fake Claude Code extension tried to open SSH backdoors"},"categories":[14,65,3,24,22,12,28],"tags":[],"companies":[39],"products":[51],"class_list":["post-7180","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-anthropic","category-claude","category-coding","category-policy-safety","category-security-defense","company-anthropic","product-claude"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Cursor: Malicious Claude Code Extension 2.1.312 and 2.1.313<\/title>\n<meta name=\"description\" content=\"Cursor\u2019s marketplace served a malicious Claude Code extension (2.1.312\u20132.1.313) on October 29, with an SSH backdoor. About 5,000 users may have been affected.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cursor: Malicious Claude Code Extension 2.1.312 and 2.1.313\" \/>\n<meta property=\"og:description\" content=\"Cursor\u2019s marketplace served a malicious Claude Code extension (2.1.312\u20132.1.313) on October 29, with an SSH backdoor. About 5,000 users may have been affected.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-29T16:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"Cursor Marketplace Served a Malicious Claude Code Extension With an SSH Backdoor\",\"datePublished\":\"2026-10-29T16:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor\"},\"wordCount\":682,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Anthropic\",\"Claude\",\"Coding\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-10-29T16:00:00+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor\",\"name\":\"Cursor: Malicious Claude Code Extension 2.1.312 and 2.1.313\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp\",\"datePublished\":\"2026-10-29T16:00:00+00:00\",\"description\":\"Cursor\u2019s marketplace served a malicious Claude Code extension (2.1.312\u20132.1.313) on October 29, with an SSH backdoor. About 5,000 users may have been affected.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"A quiet office kitchen at midday, a laptop closed on a counter, blinds open to a courtyard, no brand marks.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cursor Marketplace Served a Malicious Claude Code Extension With an SSH Backdoor\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cursor: Malicious Claude Code Extension 2.1.312 and 2.1.313","description":"Cursor\u2019s marketplace served a malicious Claude Code extension (2.1.312\u20132.1.313) on October 29, with an SSH backdoor. About 5,000 users may have been affected.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor","og_locale":"en_US","og_type":"article","og_title":"Cursor: Malicious Claude Code Extension 2.1.312 and 2.1.313","og_description":"Cursor\u2019s marketplace served a malicious Claude Code extension (2.1.312\u20132.1.313) on October 29, with an SSH backdoor. About 5,000 users may have been affected.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor","og_site_name":"i10X News","article_published_time":"2026-10-29T16:00:00+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"Cursor Marketplace Served a Malicious Claude Code Extension With an SSH Backdoor","datePublished":"2026-10-29T16:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor"},"wordCount":682,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp","articleSection":["Agents","AI Security","Anthropic","Claude","Coding","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-10-29T16:00:00+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor","url":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor","name":"Cursor: Malicious Claude Code Extension 2.1.312 and 2.1.313","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp","datePublished":"2026-10-29T16:00:00+00:00","description":"Cursor\u2019s marketplace served a malicious Claude Code extension (2.1.312\u20132.1.313) on October 29, with an SSH backdoor. About 5,000 users may have been affected.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor-title.webp","width":1344,"height":768,"caption":"A quiet office kitchen at midday, a laptop closed on a counter, blinds open to a courtyard, no brand marks."},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cursor-marketplace-malicious-claude-code-extension-ssh-backdoor#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"Cursor Marketplace Served a Malicious Claude Code Extension With an SSH Backdoor"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7180","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7180"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7180\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/7179"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7180"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7180"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7180"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7180"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7180"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}