Official Claude Code VS Code extension compromised to install SSH backdoor
Security researchers disclosed that Anthropic's official Claude Code extension was compromised on the Cursor Marketplace, installing a persistent SSH backdoor on infected hosts. The poster warns users who run the extension in VSCode as a local LLM harness.