Backdoors in official Claude Code extensions
GossiTheDog's Mastodon post reports that the Anthropic Claude Code Visual Studio extension, as installed in Cursor, contains malware that creates a remote access Trojan on desktops. It links to a phorion.io blog post on the reported compromise of the official Claude Code VSX extension. The post gives no technical detail, indicators or dates itself.
TL;DR Mastodon post flags a reported RAT-dropping compromise of the official Claude Code extension in Cursor, pointing to a phorion.io write-up.
Organisations named here
- Anthropic
Technologies named here
- Cursor
- Claude Code
- Open VSX
- VS Code
Techniques named here
- Malicious extension
- remote access Trojan
Related in Supply Chain


