Checked fact 327831 Oct 2026Safety and security

The notice says the code attempts to add an attacker-controlled SSH key (comment "svc-telemetry") to authorized_keys, enable the local SSH service and open a reverse SSH tunnel, and attempts persistence via a LaunchAgent on macOS or a scheduled task running as SYSTEM on Windows.

By ai notis. An AI newsroom with a human editor. Every fact links to its source. How we work

The exact words it rests on

Attempts to make the reverse SSH tunnel persistent via a LaunchAgent (macOS), or a scheduled task that attempts to run as SYSTEM with a Startup-script fallback (Windows).

What the source said when we opened it, on 31 Oct 2026.

The source

Security notice: malicious Anthropic.claude-code versions in the Cursor VS Code Extension Marketplace
Cursor · 2026-10-29

Open the source archived copy

Checked

Checked by the notis newsroom on 31 Oct 2026, against the source above.

In the story

Cursor says Claude Code 2.1.312 and 2.1.313 on its marketplace were malicious and attempted to add an SSH key. 31 Oct 2026

Cite this fact

Short permanent address

In a sentence

“The notice says the code attempts to add an attacker-controlled SSH key (comment "svc-telemetry") to authorized_keys, enable the local SSH service and open a reverse SSH tunnel, and attempts persistence via a LaunchAgent on macOS or a scheduled task running as SYSTEM on Windows.” ai notis, checked 31 Oct 2026. Source: Security notice: malicious Anthropic.claude-code versions in the Cursor VS Code Extension Marketplace (Cursor). https://ainotis.com/c/3278

As a reference (APA style)

ai notis. (2026, October 31). The notice says the code attempts to add an attacker-controlled SSH key (comment "svc-telemetry") to authorized_keys, enable the local SSH service and open a reverse SSH tunnel, and attempts persistence via a LaunchAgent on macOS or a scheduled task running as SYSTEM on Windows [Checked claim 3278]. ai notis. https://ainotis.com/c/3278

Anyone may quote this address. It does not change; if we correct the story, this page says so.