user.email

Domain

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

October 6, 2026

Last Seen

October 30, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Mentioned as part of a command, not as an IOC

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (2)

Vulnerabilities in OCaml Libraries Affecting Fedora 45

Oct 6·42 sources

Trojanized Claude Code Extension Plants SSH Backdoor in Cursor Marketplace

2d ago·23 sources

Related Articles (5)

OpenSourceMalware

opensourcemalware.com·1d ago

Offical Claude Code Vsx Compromise

phorion.io·1d ago

Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor

Thehackernews·2d ago

A Trusted AI Tool Was Weaponised: Inside the Trojanized Claude Code Extension Attack

Philiphall·2d ago

Variantslib

github.com·Oct 6

Related Entities

Malware Trojan Supply Chain Attack Anthropic OpenVSX Cursor Microsoft OpenSourceMalware OVHcloud SpaceXAI CWE-200 - Exposure of Sensitive Information CWE-798 - Use of Hard-coded Credentials