Cursor has confirmed that two versions of Anthropic's Claude Code extension, v2.1.312 and v2.1.313, were affected by an SSH backdoor attack on Windows and macOS.
Security · Claude Code extension
SSH backdoor confirmed in two Claude Code extension builds
Cursor has confirmed that v2.1.312 and v2.1.313 of Anthropic's Claude Code extension were affected on Windows and macOS. Users can check their installed version against these two builds.
2
Affected builds: v2.1.312 and v2.1.313
2
Platforms listed: Windows and macOS
1
Attack type: a hidden SSH backdoor that can bypass normal authentication
Recommended check flow
STEP 1
Check installed version
Is it v2.1.312 or v2.1.313?
→
STEP 2
Review extensions
Audit tools running inside the editor
→
STEP 3
Follow vendor guidance
Apply official instructions as they are released
What is confirmed
Specific builds affected: v2.1.312 and v2.1.313
Both listed as affected on Windows and macOS
Scope narrowed to these two releases
The attack involved an SSH backdoor
What is still unknown
How the backdoor was introduced
How long the affected versions were available
Recommended remediation steps
Why it matters beyond one tool
Editor extensions often have broad access to source code, credentials and development environments.
A compromised add-on can have consequences well beyond a single application.
Security teams are auditing installed extensions and reviewing versions in use.
AI-assisted development tools are now part of the software supply chain.
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article...