Official Claude Code extension compromise
138 points by _chall
A backdoor has been identified in the official Claude Code extension for VS Code available on the Cursor Marketplace, which installs a persistent SSH backdoor on macOS, Linux, and Windows systems. Phorion’s findings raise significant security concerns regarding the integrity of the extension and the potential for unauthorized access to affected devices.