# Malicious Claude Code Extension Targets 5,000 Developers with SSH Backdoor

> Source: <https://osintsights.com/malicious-claude-code-extension-targets-5000-developers-with-ssh-backdoor>
> Published: 2026-10-30 14:53:41+00:00

A malicious version of the popular Claude Code extension was compromised, putting 5,000 developers at risk of a persistent SSH backdoor malware that was served from a trusted VS Code marketplace for nearly 11 hours. The sneaky malware was cleverly hidden in a JavaScript loader, allowing it to execute immediately without requiring any user interaction.