Anthropic Extension Compromised with SSH Backdoor

Cybersecurity researchers disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor. The issue affected at most 5,000 users between about 2:27 a.m. and 1:35 p.m. PT on October 29, 2026.