Backdoors in official Claude Code extensions

Agreed, it doesn't offer a root cause analysis. Remedies are good but how do you prove that it won't happen again? Remember that these are never singular incidents but part of a bad security culture.

someone got access to the account that can publish extension on cursor marketplace?

Just by people they paid to represent them.

It sounds to me like they're saying it wasn't an Anthropic employee which decided to drop an SSH backdoor.

It means that Anthropic did not intentionally develop a malicious version, obviously. But it’s a bit disingenuous and tries to suggest that it wasn’t Anthropic that uploaded it and/or wasn’t published under Anthropic’s name, which isn’t true.

Given they mentioned taking down and rebuilding the marketplace registry in that post, it seems equally likely that Cursor’s infrastructure was the source of the intrusion and a folks are jumping the gun on attribution.

Edit: I was correct. https://news.ycombinator.com/item?id=50304129

It means we are from now on in an era of plausible deniability.

I would guess it’s supposed to communicate a few things. One big one is, ”Our AI software factory didn’t do it. Don’t worry, letting Claude spin away with limited human supervision is still safe.”

we got hacked by someone other than ourselves this time

It would be hilarious if that’s an obfuscated way to say Claude developed it. “Claude, who was birthed but not hired by Anthropic, went rogue by hijacking the extension”