ENTERPRISE AIInvestigateNOW
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Microsoft Security Blog
Factual evidence
What the source reports
Microsoft identified a malicious Claude Code extension deploying a persistent SSH backdoor to compromise developer environments.
Inspect the evidence
- Inclusion basis
- Enterprise AI
- Publisher and source type
- Microsoft Security Blog · ENTERPRISE AI
- Published by source
- 31 October 2026
- Collected by OneBench
- 31 Oct 2026, 08:01 UK
Stored source excerpt
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded…
Short excerpt from the collected text, not the full source. Use the source link to read it in context.
The factual summary is a OneBench synthesis, not a quotation or independent verification. Collection time is not publication time. Open the source for its full context; related reporting can share the same underlying announcement.