Alberto Arena: “Using Claude Code in Cursor? Check your SSH keys. https://t…”

Alberto Arena @albertoarena6d

Using Claude Code in Cursor? Check your SSH keys. https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html

The Hacker NewsOfficial Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorA compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1.314 replaced it.

11:43 · Oct 30, 2026commit f771c82

Nehal Hasnayeen @Hasnayeen6d

I'm good, being broke saved me once again

Md. Khorshed Alam @robelsust5d

Supply-chain attacks targeting IDE extensions are brutal because extensions run with full user access to ~/.ssh. Auditing authorized_keys and disabling auto-updates on third-party extensions is becoming mandatory.

Commit