Malicious Claude Code extension on Cursor planted SSH backdoors
Review AUTO-24a9750e
No AI involvement in the attack. A human-run supply-chain attack distributed a malicious extension that impersonated Anthropic's Claude Code. The AI product was only the brand being spoofed, and no AI agent or AI model was used by the attacker or acted autonomously.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Dates and discovery
- Incident date
- Not disclosed
- Added to research / record
- Not recorded
- Posted to RogueWatch
- No linked public incident
- First observed
- 2026-10-31T12:32:55.261Z UTC
- Discovery channel
- RogueWatch pipeline
- Discovery source
- https://www.bleepingcomputer.com/news/security/malicious-claude-code-extension-on-cursor-planted-ssh-backdoors/
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- www.bleepingcomputer.comRelationship not established · www.bleepingcomputer.com
Decision history
- · Source reviewed
No AI involvement in the attack. A human-run supply-chain attack distributed a malicious extension that impersonated Anthropic's Claude Code. The AI product was only the brand being spoofed, and no AI agent or AI model was used by the attacker or acted autonomously.
Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.