According to CoinMeta, on October 29th, a maliciously tampered version of Claude Code (version 2.1.313) appeared in its extension market. This installation package was not created by Anthropic and was available in the store for about 11 hours. It is estimated that up to 5,000 users may have been affected, and Cursor will be in direct contact with them. Security research firm OpenSourceMalware analyzed and found that the attackers inserted 66 lines of malicious code before the normal code of the plugin. As long as the editor loads this extension, the code will execute, without even requiring the user to communicate with Claude. The malicious program collects information such as the computer's name, Git email addresses, and public IP connections. It also secretly adds the attackers' keys to the SSH authorization list. Subsequently, it attempts to enable remote login, connects to the attackers' servers through a reverse SSH tunnel, and sets up a background task that automatically tries to reconnect every approximately 60 seconds. The malicious version has since been removed from the market, and efforts were made to shut down the attackers' servers. Affected users need to check if there is `svc-telemetry` in their SSH authorization files and use the official repair script to clean it up.