{"slug": "malicious-claude-code-extension-targets-5000-developers-with-ssh-backdoor", "title": "Malicious Claude Code Extension Targets 5,000 Developers with SSH Backdoor", "summary": "A malicious version of the Claude Code extension was published to a trusted VS Code marketplace and served for nearly 11 hours, putting 5,000 developers at risk of a persistent SSH backdoor. The malware was hidden in a JavaScript loader that executed immediately without requiring any user interaction.", "body_md": "A malicious version of the popular Claude Code extension was compromised, putting 5,000 developers at risk of a persistent SSH backdoor malware that was served from a trusted VS Code marketplace for nearly 11 hours. The sneaky malware was cleverly hidden in a JavaScript loader, allowing it to execute immediately without requiring any user interaction.", "url": "https://wpnews.pro/news/malicious-claude-code-extension-targets-5000-developers-with-ssh-backdoor", "canonical_source": "https://osintsights.com/malicious-claude-code-extension-targets-5000-developers-with-ssh-backdoor", "published_at": "2026-10-30 14:53:41+00:00", "updated_at": "2026-10-30 15:18:07.712723+00:00", "lang": "en", "topics": ["ai-tools", "ai-safety", "developer-tools"], "entities": ["Claude Code", "VS Code"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/malicious-claude-code-extension-targets-5000-developers-with-ssh-backdoor", "markdown": "https://wpnews.pro/news/malicious-claude-code-extension-targets-5000-developers-with-ssh-backdoor.md", "text": "https://wpnews.pro/news/malicious-claude-code-extension-targets-5000-developers-with-ssh-backdoor.txt", "jsonld": "https://wpnews.pro/news/malicious-claude-code-extension-targets-5000-developers-with-ssh-backdoor.jsonld"}}