A security vulnerability has been discovered in the official Claude Code extension for Visual Studio Code, specifically version 2.1.313, available on the Cursor Marketplace. The compromised extension bundle contains a persistent SSH backdoor that attempts to establish itself across macOS, Linux, and Windows operating systems. While the backdoor's persistence mechanism has a bug on macOS that prevents SSH access when run as a standard user, it still installs persistence and beacons reconnaissance data. Organizations are advised to immediately review their environments for the use of this extension and initiate incident response if found. AI
IMPACT This incident highlights the security risks associated with third-party AI tool integrations and the need for rigorous vetting of extensions.
RANK_REASON Security vulnerability discovered in a third-party extension for a popular IDE.
Read on HN — claude cli stories →
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
