● ToolsOct 30, 2026 · 14:073 sources
Attackers Compromise Official Claude VS Code Extension to Deliver SSH Backdoors
From marketbrief.now
AI;DR
Attackers compromised the official Claude VS Code extension on Oct. 30, briefly exposing users to an SSH backdoor during a narrow installation window. Security analysts recommended enabling the extensions.installCooldownHours setting in VS Code and related IDEs to mitigate risks from supply chain attacks.
Read originalSign in to suggest
Sources
+ 1 more
- SUPPORT@artemr“If you're using VSCode @code, Cursor @cursor_ai, or any other IDE built on VSCode, I would immediately enable extensions.installCooldownHours.”x.com