Claude Code Extension Malware: Find and Remove the Backdoor

Claude Code Extension Malware: Find and Remove the Backdoor Short answer: on 29 October 2026, Cursor’s extension marketplace served tampered builds of the Claude Code extension, versions 2.1.312 and 2.1.313, for Mac (Apple Silicon) and Windows, for about 11 hours. They added an attacker’s SSH key labelled svc-telemetry to your authorized_keys file and set up […]