Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
514 comments
- Points779
- Comments489
514 comments
https://cursor.com/blog/claude-code-extension-security-notic...
Story details from Hacker News ↗ · linked article on phorion.io.
Backdoor in Claude Code for VS Code extension on the Cursor Marketplace was first seen on Hacker News · Front page on Oct 30, 2026. Since then it has appeared in 71 checks on 2 different days. Its best position was #1 of 30, reached on Oct 30, 17:52 UTC. It is #1 right now, holding steady at #1 over the last 6 checks.
Position on Hacker News · Front page at every check (lower is better).
Best rank per day (UTC).
points as reported by Hacker News.
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
Felix from Anthropic here. We’re working with Cursor on this incident, but it wasn’t a compromise of Anthropic’s systems or employee laptops. A malicious actor used access to Cursor’s marketplace to publish a tampered copy of the Claude Code extension, which we didn’t build or publish. The versions on our official…
This is from the Cursor blog [1] linked in the description, but repeating it here in case it's useful to anyone: ------ Check whether you are impacted The malicious extension appends the attacker's public key, labeled svc-telemetry, to your SSH authorized keys. To check for it: On macOS, run: grep -qs svc-telemetry…
https://www.reuters.com/business/media-telecom/cursor-says-u... > Cursor said the extension was not developed by Anthropic and the maliciously modified extension was live on the marketplace from about 2:27 a.m. PT to 1:35 p.m. PT on Thursday So is this or isn't this from Anthropic and how did this happen?
Yes. As of Oct 31, 07:37 UTC it is #1, holding steady at #1 over the last 6 checks.
#1 on Hacker News · Front page, on Oct 30, 17:52 UTC. Trendoday checks this list every 15 minutes.
It was first seen on Oct 30, 2026 and has been on the list on 2 days (71 checks) since.
779 points and 489 comments; submitted by _chall on Oct 30, 2026.