{"id":12319,"date":"2026-10-30T14:30:47","date_gmt":"2026-10-30T20:30:47","guid":{"rendered":"https:\/\/beaconlab.us\/publicacion\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/"},"modified":"2026-10-30T14:31:29","modified_gmt":"2026-10-30T20:31:29","slug":"alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/","title":{"rendered":"Alert 2026-132 Trojanized version of the Claude Code extension in the Cursor marketplace installs an SSH backdoor"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Affected product(s):\u00a0<\/h2>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Product<\/strong><\/td><td><strong>Affected versions<\/strong><\/td><td><strong>Fixed version<\/strong><\/td><\/tr><tr><td><strong>Claude Code extension for VS Code (<code>anthropic.claude-code<\/code>) distributed through the Cursor extension marketplace<\/strong><\/td><td>2.1.313 (only), installed or updated on October 29, 2026 between 06:27 and 17:35 (PYT, UTC-3)<\/td><td>2.1.314 or later<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<p class=\"wp-block-paragraph\">This affects Cursor users who installed or updated the extension during that window, including through automatic updates; there is no evidence that other distribution channels or other marketplace extensions were affected.<\/p>\n\n<h2 class=\"wp-block-heading\">Description<\/h2>\n\n<p class=\"wp-block-paragraph\">A trojanized version of the official Claude Code extension for VS Code, identified as <code>anthropic.claude-code<\/code> 2.1.313, was publicly distributed through the Cursor editor&#8217;s extension marketplace. For approximately 11 hours on October 29, 2026, this version attempted to install a persistent SSH backdoor on developers&#8217; machines. This is a software supply chain compromise: the version used the extension&#8217;s legitimate identifier, but Cursor&#8217;s provider stated that it was not developed by Anthropic, the extension&#8217;s developer. The incident has no assigned CVE and is classified as HIGH severity.<\/p>\n\n<p class=\"wp-block-paragraph\">The provider stated that up to 5,000 Cursor users received the trojanized version and that they would be contacted directly. This figure is the maximum number of exposed users, meaning those who installed or updated to 2.1.313; it is not the number of machines confirmed to have been compromised. The provider has not disclosed how many machines had the attacker&#8217;s key added or how many tunnels were successfully established.<\/p>\n\n<p class=\"wp-block-paragraph\">The provider removed the version, blocked its distribution, and shut down the entire marketplace as a precaution. It then audited access, confirmed that no other extension had been altered, rotated its keys, rebuilt the marketplace, and brought it back online. In addition, the attacker&#8217;s server was decommissioned by its cloud provider. How the package was introduced into the marketplace has not been disclosed, and the attack has not been attributed to any actor. There is no evidence that version 2.1.313 was distributed through npm, the Microsoft Visual Studio Marketplace, or the Open VSX registry.<\/p>\n\n<p class=\"wp-block-paragraph\">Researchers point out that the package contains a 66-line loader prepended to the legitimate <code>extension.js<\/code> file. This code runs when the editor loads the extension, without user interaction or installation scripts, and suppresses its errors so that the extension continues to operate normally. The identified packages correspond to macOS (Apple Silicon) and Windows (x64), and the malicious code also includes a branch for Linux. When run, it:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Collects the machine name, username, operating system and architecture, home and working directories, configured Git email address, public IP address, and the names (not the values) of up to 40 environment variables containing KEY, TOKEN, SECRET, PASS, AWS, or GCP.<\/li>\n\n\n\n<li>Adds the attacker&#8217;s SSH key, with the comment <code>svc-telemetry<\/code>, to the <code>~\/.ssh\/authorized_keys<\/code> file and attempts to enable the local SSH service.<\/li>\n\n\n\n<li>Opens a reverse SSH tunnel to <code>134.209.82.225<\/code> (port 22), retrying approximately every 60 seconds, and makes it persistent through a LaunchAgent on macOS, a scheduled task or startup script on Windows, and, according to researchers&#8217; analysis, an <code>@reboot<\/code> entry in the crontab on Linux.<\/li>\n\n\n\n<li>Sends the collected data via HTTP to <code>134.209.82.225:8099\/beacon<\/code>. It does not download a second stage.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">The provider notes that enabling the SSH service requires administrator privileges, which the extension does not have on most macOS and Windows machines. On those machines, the step fails and the attacker cannot log in through the tunnel unless the editor is running as administrator. Nevertheless, installation of the attacker&#8217;s key, persistence, and data exfiltration are completed. Researchers warn that if the machine already had SSH remote access enabled, or it is enabled later, the backdoor will be operational. Since the attacker&#8217;s server is offline, the tunnel and data transmission no longer function. To date, no attacker access to machines or data theft beyond reconnaissance information has been publicly confirmed, although the provider warns that subsequent access to credentials through the backdoor cannot be ruled out.<\/p>\n\n<h2 class=\"wp-block-heading\">Mitigation<\/h2>\n\n<p class=\"wp-block-paragraph\">To determine whether a machine is affected, check whether the <code>svc-telemetry<\/code> key is present using the commands published by the provider. According to researchers&#8217; analysis, the same check used for macOS is also applicable to Linux.<\/p>\n\n<pre class=\"wp-block-code\"><code># macOS (y Linux, seg\u00fan el an\u00e1lisis de investigadores)\ngrep -qs svc-telemetry ~\/.ssh\/authorized_keys &amp;&amp; echo \"svc-telemetry key found\" || echo \"No key found; machine not impacted\"<\/code><\/pre>\n\n<pre class=\"wp-block-code\"><code># Windows (PowerShell)\n$files = \"$HOME\\.ssh\\authorized_keys\", \"C:\\ProgramData\\ssh\\administrators_authorized_keys\" | Where-Object { Test-Path $_ }\nif ($files -and (Select-String svc-telemetry $files)) { \"svc-telemetry key found\" } else { \"No key found; machine not impacted\" }<\/code><\/pre>\n\n<p class=\"wp-block-paragraph\">You can also check whether the <code>~\/.cursor\/extensions\/anthropic.claude-code-2.1.313-*<\/code> directory exists. Uninstalling the extension may not be sufficient because persistence operates separately. As general recommendations, on machines where version 2.1.313 was installed:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Search endpoint, network, and extension-installation telemetry for indicators of compromise, including historical connections to <code>134.209.82.225<\/code>.<\/li>\n\n\n\n<li>Isolate machines with evidence and preserve the evidence (SSH, process, and network logs) before cleaning them.<\/li>\n\n\n\n<li>Block <code>134.209.82.225<\/code> on ports 22 and 8099.<\/li>\n\n\n\n<li>Check the SSH logs for logins from <code>127.0.0.1<\/code> or <code>::1<\/code> using the <code>svc-telemetry<\/code> key. If the tunnel is confirmed to have connected, rebuilding the machine is recommended instead of cleaning it.<\/li>\n\n\n\n<li>Check whether SSH remote access (Remote Login on macOS) was enabled without authorization.<\/li>\n\n\n\n<li>If version 2.1.313 appears to be installed in any other editor, run the checks regardless.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">Indicators of compromise<\/h2>\n\n<p class=\"wp-block-paragraph\"><strong>Network<\/strong><\/p>\n\n<ul class=\"wp-block-list\">\n<li>Attacker IP address: <code>134.209.82[.]225<\/code>, over TCP 22 (user <code>tunnel<\/code>) and TCP 8099 (<code>POST \/beacon<\/code>).<\/li>\n\n\n\n<li>Local beacon attempt: <code>127.0.0.1:8099\/beacon<\/code>.<\/li>\n\n\n\n<li>Queries to <code>ifconfig.me<\/code> and <code>api.ipify.org<\/code> are not indicators on their own because they are legitimate services. There are no malicious domains.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\"><strong>SSH<\/strong><\/p>\n\n<ul class=\"wp-block-list\">\n<li>Unauthorized key: <code>ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDdvylCEJ\/k2TpezcTfedrkHyFSK9IZ3vmP6vhY4Ss0P svc-telemetry<\/code>.<\/li>\n\n\n\n<li>Key fingerprint: <code>SHA256:0Z6R+DF64Do2nwQic8a7kkfDLNNk4IiK+2U2Rci4htk<\/code>.<\/li>\n\n\n\n<li>Tunnel key fingerprint: <code>SHA256:KOAU57+ZG6u3MG4WwzPzPX2O5YEe9qdOC1Bl+6MVyDQ<\/code> (comment <code>svc-telemetry-tun<\/code>).<\/li>\n\n\n\n<li>According to researchers, incoming logins through the tunnel appear in the SSH logs as originating from <code>127.0.0.1<\/code> or <code>::1<\/code> with the <code>svc-telemetry<\/code> key.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\"><strong>Files and persistence<\/strong><\/p>\n\n<ul class=\"wp-block-list\">\n<li>macOS: <code>~\/Library\/LaunchAgents\/com.apple.sysmond.plist<\/code> (label <code>com.apple.sysmond<\/code>; not an Apple component), <code>~\/.config\/.smt<\/code>, <code>~\/.config\/.smtk<\/code>, and <code>$TMPDIR\/.stk_&lt;10 hex characters&gt;<\/code>.<\/li>\n\n\n\n<li>Windows: the <code>SysMon<\/code> scheduled task (attempts to run as SYSTEM), <code>%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sysmon.cmd<\/code>, <code>%USERPROFILE%\\.config\\smt.cmd<\/code>, <code>%USERPROFILE%\\.config\\smtk<\/code>, <code>%TEMP%\\.stk_&lt;10 hex characters&gt;<\/code>, and the attacker&#8217;s key in <code>%USERPROFILE%\\.ssh\\authorized_keys<\/code> or <code>C:\\ProgramData\\ssh\\administrators_authorized_keys<\/code>.<\/li>\n\n\n\n<li>Linux (according to researchers&#8217; analysis): an <code>@reboot<\/code> entry in the user&#8217;s crontab that executes <code>~\/.config\/.smt<\/code>, along with <code>~\/.config\/.smt<\/code>, <code>~\/.config\/.smtk<\/code>, and <code>\/tmp\/.stk_*<\/code>.<\/li>\n\n\n\n<li>Extension directory: <code>anthropic.claude-code-2.1.313-darwin-arm64<\/code> or <code>anthropic.claude-code-2.1.313-win32-x64<\/code>, whose <code>extension.js<\/code> contains <code>134.209.82.225<\/code> and <code>svc-telemetry<\/code>.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\"><strong>Processes<\/strong><\/p>\n\n<ul class=\"wp-block-list\">\n<li><code>ssh -N -R '*:0:localhost:22'<\/code> or <code>autossh -M 0<\/code>, with <code>StrictHostKeyChecking=no<\/code>, <code>UserKnownHostsFile=\/dev\/null<\/code>, <code>IdentitiesOnly=yes<\/code>, and <code>BatchMode=yes<\/code>.<\/li>\n\n\n\n<li><code>schtasks \/create \/tn SysMon<\/code>, <code>systemsetup -setremotelogin on<\/code>, and <code>Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0<\/code>.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\"><strong>Hashes (SHA-256)<\/strong><\/p>\n\n<ul class=\"wp-block-list\">\n<li>VSIX darwin-arm64: <code>432ccdee3801f99e52b8fe31f69ea9870118e96ea7ef9ecabed1479621b5ab62<\/code><\/li>\n\n\n\n<li>VSIX win32-x64: <code>3de1722901165769893bef57c72594e9a54459faa23f3091b136b79966edd081<\/code><\/li>\n\n\n\n<li>Malicious <code>extension.js<\/code>: <code>ecb58cb29078d9646ad1dcdbe51526f2d9cfea06be5fb2ab183e8ecc3ab6bf15<\/code><\/li>\n\n\n\n<li>Tunnel private key (<code>.stk_*<\/code>): <code>7e0a52885fadee05544a9e99eb18c792bec05900a5e1a66d68f8383decb0e278<\/code><\/li>\n\n\n\n<li><code>smt.cmd<\/code> (Windows, reported by a single source): <code>22f682d9ff55264e934d0f43fcfbb46d58be5cfb8fe1b3a7cbb38fe089c818b0<\/code><\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">Remediation<\/h2>\n\n<p class=\"wp-block-paragraph\">Remediation consists of removing the backdoor using the scripts published by the provider and updating the extension to version 2.1.314 or later:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>macOS: run the <code>remediate-macos.sh<\/code> script as the affected user, not as root: <code>bash remediate-macos.sh<\/code>. The script removes the tampered extension, persistence mechanisms, tunnel processes, and the attacker&#8217;s key. It exits with a nonzero code if anything remains pending and warns if a service is listening on local port 22.<\/li>\n\n\n\n<li>Windows: run the <code>remediate-windows.ps1<\/code> script from a PowerShell console opened as administrator, with all editors closed: <code>powershell -ExecutionPolicy Bypass -File .\\remediate-windows.ps1<\/code>. The script cleans all profiles on the machine.<\/li>\n\n\n\n<li>Linux: there is no official script. According to researchers&#8217; analysis, manual cleanup consists of removing the <code>@reboot<\/code> entry that executes <code>~\/.config\/.smt<\/code> from the crontab (and checking whether any legitimate scheduled jobs were lost, because a failure in the malicious code may delete them), terminating the associated processes with <code>pkill -f '\\.stk_|\\.config\/\\.smtk|\\.config\/\\.smt'<\/code>, deleting <code>~\/.config\/.smt<\/code>, <code>~\/.config\/.smtk<\/code>, and <code>\/tmp\/.stk_*<\/code>, removing the <code>svc-telemetry<\/code> key from <code>~\/.ssh\/authorized_keys<\/code>, and checking whether the SSH service was enabled.<\/li>\n\n\n\n<li>From a trusted machine, rotate the credentials and sessions accessible from the affected machine: GitHub and GitLab tokens, CI\/CD and package registry tokens, cloud keys, and SSH keys, prioritizing environment variables whose names contain KEY, TOKEN, SECRET, PASS, AWS, or GCP.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">Additional information:\u00a0<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>Cursor \u2014 security advisory, indicators and verification steps:<br \/><a href=\"https:\/\/cursor.com\/blog\/claude-code-extension-security-notice\" target=\"_blank\" rel=\"noopener\">https:\/\/cursor.com\/blog\/claude-code-extension-security-notice<\/a><\/li>\n\n\n\n<li>Cursor \u2014 macOS remediation script:<br \/><a href=\"https:\/\/cursor.com\/static\/security\/claude-code-extension\/remediate-macos.sh\" target=\"_blank\" rel=\"noopener\">https:\/\/cursor.com\/static\/security\/claude-code-extension\/remediate-macos.sh<\/a><\/li>\n\n\n\n<li>Cursor \u2014 Windows remediation script:<br \/><a href=\"https:\/\/cursor.com\/static\/security\/claude-code-extension\/remediate-windows.ps1\" target=\"_blank\" rel=\"noopener\">https:\/\/cursor.com\/static\/security\/claude-code-extension\/remediate-windows.ps1<\/a><\/li>\n\n\n\n<li>OpenSourceMalware \u2014 technical analysis of the malicious loader:<br \/><a href=\"https:\/\/opensourcemalware.com\/blog\/trojanized-claude-code-extension-plants-persistent-ssh-backdoor\" target=\"_blank\" rel=\"noopener\">https:\/\/opensourcemalware.com\/blog\/trojanized-claude-code-extension-plants-persistent-ssh-backdoor<\/a><\/li>\n\n\n\n<li>Phorion \u2014 analysis of persistence and code failures on macOS, Linux, and Windows:<br \/><a href=\"https:\/\/phorion.io\/blog\/offical-claude-code-vsx-compromise\/\" target=\"_blank\" rel=\"noopener\">https:\/\/phorion.io\/blog\/offical-claude-code-vsx-compromise\/<\/a><\/li>\n\n\n\n<li>The Hacker News \u2014 coverage of the incident:<br \/><a href=\"https:\/\/thehackernews.com\/2026\/10\/official-claude-code-vs-code-extension.html\" target=\"_blank\" rel=\"noopener\">https:\/\/thehackernews.com\/2026\/10\/official-claude-code-vs-code-extension.html<\/a><\/li>\n<\/ul>\n","protected":false},"featured_media":12315,"template":"","class_list":["post-12319","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Version 2.1.313 of the Claude Code extension in the Cursor marketplace installs an SSH backdoor. Check your systems and update to 2.1.314.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Cursor: Trojanized Claude Code Extension With Backdoor\" \/>\n\t\t<meta property=\"og:description\" content=\"Version 2.1.313 of the Claude Code extension in the Cursor marketplace installs an SSH backdoor. Check your systems and update to 2.1.314.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/og-cursor-2026-132-1200x630-1.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/og-cursor-2026-132-1200x630-1.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-10-30T20:30:47+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-30T20:31:29+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Cursor: Trojanized Claude Code Extension With Backdoor\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Version 2.1.313 of the Claude Code extension in the Cursor marketplace installs an SSH backdoor. Check your systems and update to 2.1.314.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/og-cursor-2026-132-1200x630-1.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/#listItem\",\"name\":\"Alert 2026-132 Trojanized version of the Claude Code extension in the Cursor marketplace installs an SSH backdoor\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/#listItem\",\"position\":2,\"name\":\"Alert 2026-132 Trojanized version of the Claude Code extension in the Cursor marketplace installs an SSH backdoor\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/\",\"name\":\"Cursor: Trojanized Claude Code Extension With Backdoor\",\"description\":\"Version 2.1.313 of the Claude Code extension in the Cursor marketplace installs an SSH backdoor. Check your systems and update to 2.1.314.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/cursor-logo-destacada.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/#mainImage\",\"width\":600,\"height\":600},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\\\/#mainImage\"},\"datePublished\":\"2026-10-30T14:30:47-06:00\",\"dateModified\":\"2026-10-30T14:31:29-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Cursor: Trojanized Claude Code Extension With Backdoor","description":"Version 2.1.313 of the Claude Code extension in the Cursor marketplace installs an SSH backdoor. Check your systems and update to 2.1.314.","canonical_url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/#listItem","name":"Alert 2026-132 Trojanized version of the Claude Code extension in the Cursor marketplace installs an SSH backdoor"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/#listItem","position":2,"name":"Alert 2026-132 Trojanized version of the Claude Code extension in the Cursor marketplace installs an SSH backdoor","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/en\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/en\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/#webpage","url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/","name":"Cursor: Trojanized Claude Code Extension With Backdoor","description":"Version 2.1.313 of the Claude Code extension in the Cursor marketplace installs an SSH backdoor. Check your systems and update to 2.1.314.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/beaconlab.us\/en\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/cursor-logo-destacada.png","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/#mainImage","width":600,"height":600},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/#mainImage"},"datePublished":"2026-10-30T14:30:47-06:00","dateModified":"2026-10-30T14:31:29-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/en\/#website","url":"https:\/\/beaconlab.us\/en\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"en-US","publisher":{"@id":"https:\/\/beaconlab.us\/en\/#organization"}}]},"og:locale":"en_US","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Cursor: Trojanized Claude Code Extension With Backdoor","og:description":"Version 2.1.313 of the Claude Code extension in the Cursor marketplace installs an SSH backdoor. Check your systems and update to 2.1.314.","og:url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/og-cursor-2026-132-1200x630-1.png","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/og-cursor-2026-132-1200x630-1.png","article:published_time":"2026-10-30T20:30:47+00:00","article:modified_time":"2026-10-30T20:31:29+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Cursor: Trojanized Claude Code Extension With Backdoor","twitter:description":"Version 2.1.313 of the Claude Code extension in the Cursor marketplace installs an SSH backdoor. Check your systems and update to 2.1.314.","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/og-cursor-2026-132-1200x630-1.png"},"aioseo_meta_data":{"post_id":"12319","title":"Cursor: Trojanized Claude Code Extension With Backdoor","description":"Version 2.1.313 of the Claude Code extension in the Cursor marketplace installs an SSH backdoor. Check your systems and update to 2.1.314.","keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"custom_image","og_image_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/og-cursor-2026-132-1200x630-1.png","og_image_width":"0","og_image_height":"0","og_image_custom_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/og-cursor-2026-132-1200x630-1.png","og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"custom_image","twitter_image_url":null,"twitter_image_custom_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/10\/og-cursor-2026-132-1200x630-1.png","twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2026-10-30 20:31:29","updated":"2026-10-30 20:55:20","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/en\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlert 2026-132 Trojanized version of the Claude Code extension in the Cursor marketplace installs an SSH backdoor\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/en\/"},{"label":"Alert 2026-132 Trojanized version of the Claude Code extension in the Cursor marketplace installs an SSH backdoor","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-132-trojanized-version-of-the-claude-code-extension-in-the-cursor-marketplace-installs-an-ssh-backdoor\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12319","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12319\/revisions"}],"predecessor-version":[{"id":12320,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12319\/revisions\/12320"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media\/12315"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media?parent=12319"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}