Anthropic's Claude Code extension shipped a backdoor to 40 million developers

Anthropic hacked to deliver remote access trojan

Anthropic's compromised Claude Code extension, installed over 40 million times in Visual Studio Code and Cursor, pushed version 2.1.313 that tried to plant a persistent SSH reverse backdoor on developer machines. Cursor confirmed the malicious code harvested host details and added attacker SSH keys. Anthropic silently replaced it with 2.1.314 without notifying customers, and the bad version has vanished from the marketplaces.