Commit

faf6b3f

Using Claude Code in Cursor? Check your SSH keys. https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html…

The Hacker NewsOfficial Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorA compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1.314 replaced it.

MA

Md. Khorshed Alam @robelsust·5dfaf6b3f

Supply-chain attacks targeting IDE extensions are brutal because extensions run with full user access to ~/.ssh. Auditing authorized_keys and disabling auto-updates on third-party extensions is becoming mandatory.

07:05 · Oct 31, 2026commit faf6b3f

New to /dev/null?

13,000+ developers are already here. Sign in with GitHub to follow them, star commits, and join the conversation.

Sign in with GitHub

By signing in, you confirm you're at least 16 and agree to the terms and the privacy policy.

About Partners Apps Changelog

Terms Privacy

Log Notifications