Microsoft, Saturday, October 31st, 2026
Inside a Malicious Claude Code-Branded Extension and Its Persistent SSH Backdoor
Microsoft analyzes a tampered Claude Code extension served on the Cursor marketplace that installed an SSH key and persistent reverse SSH access.
more →