VS studio babe, wake up Time to uninstall and wipe your machine (hope no keys or wallets were stored on it) Allegedly TL;DR: Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up focuses primarily on macOS, where the extension attempts to configure an SSH backdoor and establish persistence. Credit/source: https://phorion.io/blog/offical-claude-code-vsx-compromise/

Official Claude Code Extension Compromise: Security Advisory | PhorionPhorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up …phorion.ioKevin Beaumont (@GossiTheDog@cyberplace.social)Anthropic Visual Studio Claude Code extension on Cursor has malware in it, which creates a remote access Trojan to desktops. https://phorion.io/blog/offical-claude-code-vsx-compromise/cyberplace.social