Anthropic Claude VS Code extension compromised SSH backdoor

The official Anthropic Claude Code extension in the Open VSX registry was compromised to install a persistent SSH backdoor on infected developer machines. The compromise also affected the Cursor marketplace's extension service. Cursor temporarily shut down its service to remove the malware. Developers using these extensions should remove them immediately and check for unauthorized SSH access.