Anthropic's Claude Code extension tampered with to plant remote access backdoor

Anthropic hacked to deliver remote access trojan

Version 2.1.313 of the Claude Code extension was maliciously modified, Cursor confirmed: the build tried to collect host information and install a persistent SSH backdoor. Kevin Beaumont notes the extension auto-updates, and Anthropic replaced the version with 2.1.314 about eight hours ago. He is not sure the new build is free of the malicious code.

Why it matters: Cursor disclosed that a tampered Claude Code extension tried to open a persistent SSH backdoor, though a code error means that step usually needs admin rights to succeed.