Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
A tampered Claude Code extension was briefly distributed through Cursor’s marketplace and attempted to establish persistent remote access.
Edition · Sun · November 1, 2026
4 vertical editions · 12 stories · 24 source citations
Three sourced developments: a malicious extension distributed through Cursor’s marketplace, a separate startup claim of access to Anthropic systems, and reports that Claude blocks some video-game reverse-engineering requests. Other high-engagement leads lacked independent corroboration or sufficient source detail.
A tampered Claude Code extension was briefly distributed through Cursor’s marketplace and attempted to establish persistent remote access.
A cybersecurity startup said it accessed some Anthropic employee information and internal messages through weaknesses in enterprise software.
Two technology outlets reported that Claude began refusing some requests to recreate or reverse-engineer video games.
One multi-outlet regulatory development qualified. ClinicalTrials.gov records in the collection were registry entries without independent reporting; no eligible CAR-T, NAC or NAD-precursor news cluster was established.
HHS announced temporary enforcement discretion for compounding involving six peptides while FDA rulemaking continues.
Five multi-outlet developments: Oleshky evacuations, G20 divisions, Hong Kong fire accountability, Canada-EU ties and the Binance theft. Other collected single-feed items lacked a second independent outlet or adequate significance.
Residents left Russian-occupied Oleshky during a local ceasefire and crossed into Ukrainian-held territory via Belarus.
Divisions over Russia’s participation and other disputes overshadowed the G20 foreign ministers’ meeting in Atlanta.
A government inquiry into the Wang Fuk Court fire found inadequate oversight, prompting an apology and a minister’s resignation.
Canada and the European Union announced a closer partnership and set a target for negotiations on an associate-member arrangement.
The FBI attributed a $6.3 billion cryptocurrency theft from Binance to North Korea; the exchange said partners had frozen part of the assets.
Three sourced developments: AI-driven spending concerns behind a technology selloff, Reddit’s outlook and referral trends, and OpenAI’s reduced fundraising target. Market and company data sources were limited, including an SEC EDGAR access failure.
Technology shares fell as investors assessed heavy AI infrastructure spending and company results.
Reddit’s quarterly outlook and declining search referrals accompanied a proposed move to limit logged-out access.
Reports say OpenAI has lowered its fundraising goal and is now seeking up to $20 billion in its latest round.