Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Cursor Marketplace to install a persistent SSH backdoor on infected hosts. Two sources: https://phorion.io/blog/offical-claude-code-vsx-compromise/ https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html Looks legit, post this to warn users who use Claude Code as local LLM harness and this extension inside VSCode.   submitted by   /u/feelspeaceman [link]   [comments]