news
Microsoft Security
October 31st, 2026 at 1:02 AM

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog .

Get stories like this every Monday

The week's most important AI news in one email. Free, unsubscribe anytime.

Score: 2.10

Engagement proxy: 0

Canonical link: https://www.microsoft.com/en-us/security/blog/2026/10/30/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor/