Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Published 2026-10-31T01:02:57Z•c81162a603729696df8bf419dd6d47e977b3b653e58852166d6da6e31fbf4a5e
Source metadata
- Publication date
- 2026-10-31T01:02:57Z
- Source identifier
- https://www.microsoft.com/en-us/security/blog/?p=150709
- Public record ID
- record:sha256:c81162a603729696df8bf419dd6d47e977b3b653e58852166d6da6e31fbf4a5e
This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- c81162a603729696df8bf419dd6d47e977b3b653e58852166d6da6e31fbf4a5e
- Record type
- Source metadata
This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.