[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcppra37FADF3oHNvBcCKMjWzAcnb8T3wOwTM8HBktHs":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":19,"status":27,"created_at":28,"published_at":29,"article":30,"tags":34,"podcasts":47,"controls":48},"641fbd63-3306-48a9-8dbb-8a9a999aa85f","malicious-claude-code-extension-plants-ssh-backdoors-via-cursor-marketplace","05c8a49f-76b5-4d0d-88d3-4574d5b3d6a7","Malicious Claude Code Extension Plants SSH Backdoors via Cursor Marketplace","A trojanized version of Anthropic's Claude Code extension was published to the Cursor IDE marketplace and remained available for 11 hours, during which up to 5,000 developers may have installed it. The malware attempted to establish persistent SSH backdoors by injecting attacker-controlled keys and creating reverse tunnels — giving attackers long-term remote access to compromised developer machines. This incident highlights the inherent trust developers place in IDE marketplaces and how that trust can be weaponised through supply chain compromise. Developer workstations are high-value targets because they often hold source code, credentials, and cloud access — making a successful backdoor here potentially catastrophic for downstream systems.","**Immediate actions:**\n- Audit all recently installed IDE extensions and remove any installed during the 11-hour window (approx. the known exposure period) of the malicious Claude Code extension.\n- Rotate all SSH keys and inspect `~\u002F.ssh\u002Fauthorized_keys` on developer machines for unauthorised entries added during the exposure window.\n- Scan developer endpoints for active reverse SSH tunnels or unexpected outbound connections to unknown hosts.\n\n**Long-term improvements:**\n- Establish a vetting and allowlisting policy for IDE extensions, requiring security review before installation in corporate environments.\n- Implement least-privilege access controls so developer workstations cannot accept inbound SSH connections or establish arbitrary outbound tunnels without explicit firewall rules.\n- Integrate software composition and extension integrity checks (e.g., hash verification, publisher signing) into developer onboarding and toolchain policies.\n\n**Detection measures:**\n- Deploy endpoint detection and response (EDR) tooling on developer machines to alert on unauthorised modifications to SSH authorised_keys files.\n- Monitor outbound network traffic from developer workstations for reverse tunnel patterns (e.g., persistent outbound SSH on non-standard ports) using SIEM correlation rules.",[12,13,14,15,16,17,18],"CIS Control 2: Inventory and Control of Software Assets","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","MITRE ATT&CK T1566: Phishing","OWASP A06:2021 Vulnerable and Outdated Components","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIST SP 800-53 SI-2: Flaw Remediation","NIS2 Article 21(2)(b)",{"NIS2 Article 21(2)(b)":20,"MITRE ATT&CK T1566: Phishing":21,"NIST SP 800-53 SI-2: Flaw Remediation":22,"OWASP A06:2021 Vulnerable and Outdated Components":23,"CIS Control 2: Inventory and Control of Software Assets":24,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":25,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":26},"NIS2 requires supply chain security measures including policies on secure software acquisition; vetting of IDE marketplace extensions used by developers would fall squarely under this obligation and could have prevented the malicious package from reaching production machines.","While not traditional phishing, the technique mirrors supply chain trojanising — delivering malware through a trusted distribution channel (the IDE marketplace) in the same way phishing exploits trusted communication channels, making user awareness and delivery-channel vetting essential.","Prompt detection and removal of the compromised extension, combined with remediation of affected systems (key rotation, tunnel removal), maps directly to SI-2's requirement for timely identification and correction of information system flaws.","Developers installing third-party extensions without verifying their integrity or provenance mirrors the A06 risk of using unverified components, which in this case introduced active malware rather than a passive vulnerability.","Maintaining an approved inventory of permitted software and extensions would have flagged the unauthorised or anomalous Claude Code extension before or immediately after installation.","A formal process for assessing the security of third-party software and plugins used in the development environment would have included integrity verification steps that could have caught the malicious extension before widespread installation.","The malware injected attacker SSH keys into authorized_keys files; strong controls over cryptographic key lifecycle and authorised key auditing would have detected or prevented this persistence mechanism.","published","2026-10-30T15:21:14.994123+00:00","2026-10-30T15:21:14.978+00:00",{"id":7,"url":31,"slug":32,"title":33},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fmalicious-claude-code-extension-on-cursor-planted-ssh-backdoors\u002F","malicious-claude-code-extension-on-cursor-planted-ssh-backdoors-c1aa10","Malicious Claude Code extension on Cursor planted SSH backdoors",[35,41],{"id":36,"name":37,"slug":38,"description":39,"color":40},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":42,"name":43,"slug":44,"description":45,"color":46},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[],[49,53,57],{"slug":50,"name":51,"problem":52},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",{"slug":54,"name":55,"problem":56},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":58,"name":59,"problem":60},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship."]