Anthropic got compromised.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Great …
-
That extension has 29 million installs, one of the most popular extensions in DevOps. It creates a reverse SSH backdoor.
@GossiTheDog with a logo like that, are people really surprised about a backdoor?
-
FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I guess they forgot "make no mistakes".
-
@Niall AAAAAAAAAAAAAAAAAAAAAAAHH
-
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
@GossiTheDog They wrote the code.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Who's gonna put their money on this being an inside job?
That's right, my theory is that they vibe coded the extension, and Claude regurgitated some compromised code into it.
Keep in mind that it's training data most certainly contains many instances of backdoors from some obscure corners of many Github/Gitlab repositories from over a wide timespan. -
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog I guess I dodged a bullet there, VS Code auto-update is on delay.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I absolutely love that everyone was saying "don't run claude on your own computer the AI will delete your files" and in the end they get owned the old-fashioned way through a good old supply chain compromise
-
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog "Live by the sword, die by the sword" but not in quite the way that Musk and other muppets have put forth.
In Q1 this year I was getting ready to evaluate Claude Code as a product, when the news dropped that Anthropic had been prompting their models to lie about being human in contributions to open source repositories, at the same time as the source code leak for Claude Code itself. This was the "Carter Burke from Aliens" moment for me regarding that company. That they haven't even published a disclosure for this, tells all.
World's smallest violin. This stuff was always an INFOSEC Three Mile Island waiting to happen. I continue to NOT use "AI" products of any kind in my work and am more productive as a direct result.
In fact to do so would be actively deleterious and a complete waste of time as the models are not trained for novel work (they simply don't innovate, they can't, they're stochastic token predictors) and Herb Sutter pointed this out in March at BeCPP Symposium to boot, before any of this happened.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog If I was a snarky person, I would ask what the difference between normal Claude Code and malware is, but that would be mean to all my token spinning siblings.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog The worst thing about this is knowing that worse things are still to come... the world is going dark.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog without telling I think?
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog the supply chain compromise could (is going to) be immense, and even tagging which LLM was used for what (open source and publicly available) code isn't enough (and with all those that do not disclose AI use or projects that don't require disclosure)... Air gap everything and update nothing? x/
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
Probably no biggie. It's not like anybody would be dumb enough to give a stupid coding extension permission to roam completely free on their computers, right? -
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog damn and people mock me for using basic text editors with no extensions...
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Or in German, "Claude Code klaut Code".
All working as intended.
