Claude Code extension poisoned with persistent SSH backdoor
AI-generated summary A tampered build of Anthropic's Claude Code extension for editors planted an SSH backdoor on developers' machines. Phorion found version 2.1.313 on Open VSX, while Cursor said up to 5,000 users were affected.