Trojanized Claude Code extension on Open VSX planted a persistent SSH backdoor

OpenSourceMalware analyzed version 2.1.313 on Open VSX and says its prepended loader added an SSH key, opened a reverse tunnel and set persistence.

RuntimeWire · 2026-10-30T05:04:05.504Z