Skip to content

Back to the catalog

cyberplace.socialthread

Backdoors in official Claude Code extensions

GossiTheDog's Mastodon post reports that the Anthropic Claude Code Visual Studio extension, as installed in Cursor, contains malware that creates a remote access Trojan on desktops. It links to a phorion.io blog post on the reported compromise of the official Claude Code VSX extension. The post gives no technical detail, indicators or dates itself.

TL;DR Mastodon post flags a reported RAT-dropping compromise of the official Claude Code extension in Cursor, pointing to a phorion.io write-up.

Organisations named here

  • Anthropic

Technologies named here

  • Cursor
  • Claude Code
  • Open VSX
  • VS Code

Techniques named here

  • Malicious extension
  • remote access Trojan