Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
Review AUTO-5f7519c5
Malware was distributed under the name of Anthropic's Claude Code extension, but the article describes no AI system used by the attacker, and no AI agent acting autonomously. The AI product served only as a trojanized distribution vehicle, so this is a conventional supply-chain malware incident and does not meet the rogue-AI scope.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Dates and discovery
- Incident date
- Not disclosed
- Added to research / record
- Not recorded
- Posted to RogueWatch
- No linked public incident
- First observed
- 2026-10-31T12:33:49.349Z UTC
- Discovery channel
- RogueWatch pipeline
- Discovery source
- https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- thehackernews.comRelationship not established · thehackernews.com
Decision history
- · Source reviewed
Malware was distributed under the name of Anthropic's Claude Code extension, but the article describes no AI system used by the attacker, and no AI agent acting autonomously. The AI product served only as a trojanized distribution vehicle, so this is a conventional supply-chain malware incident and does not meet the rogue-AI scope.
Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.