SSH Backdoor

An SSH backdoor is a hidden method of access planted in a system so that someone can log in remotely without going through the normal authentication controls. SSH (secure shell) is the standard tool administrators use to remotely manage servers, so a backdoor in it can give an attacker persistent, quiet control over systems that appear to be well protected. For AI governance teams, this matters because AI model training and hosting infrastructure often runs on servers that depend on SSH, and a compromise can expose proprietary models, training data, and credentials without triggering routine alerts.

1 item

Corporate PolicyGlobal2026-10-31

Fake Anthropic Extension on Cursor Hit 5,000 Developers With SSH Backdoors

A malicious extension impersonating Anthropic's Claude Code tool was distributed through Cursor's AI developer marketplace for roughly 11 hours on October 29, 2026. It installed persistent remote access tools on affected machines and collected environment details linked to sensitive credentials. Cursor removed the extension, shut down its marketplace for auditing, and rotated access keys, but how attackers published under Anthropic's name remains unexplained.

supply chain attack AI developer tools Anthropic Cursor SSH backdoor credential theft marketplace security