cd /news/ai-tools/malicious-claude-code-extension-targ… · home › topics › ai-tools › article
[ARTICLE · art-160978] src=osintsights.com ↗ pub= topic=ai-tools verified=true sentiment=↓ negative

Malicious Claude Code Extension Targets 5,000 Developers with SSH Backdoor

A malicious version of the Claude Code extension was published to a trusted VS Code marketplace and served for nearly 11 hours, putting 5,000 developers at risk of a persistent SSH backdoor. The malware was hidden in a JavaScript loader that executed immediately without requiring any user interaction.

by read1 min views1 publishedOct 30, 2026

A malicious version of the popular Claude Code extension was compromised, putting 5,000 developers at risk of a persistent SSH backdoor malware that was served from a trusted VS Code marketplace for nearly 11 hours. The sneaky malware was cleverly hidden in a JavaScript , allowing it to execute immediately without requiring any user interaction.

source & further reading
osintsights.com — original article Cybersecurity Threats Exposed in Week of AI-Powered Attacks Malware Exploits AI Apps to Deploy Crypto Miners Malware Exploits OpenAI Keys for AI Queries
── more in #ai-tools 4 stories · sorted by recency
── more on @claude code 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/malicious-claude-cod…] indexed:0 read:1min 2026-10-30 · —