Anthropic got compromised.
-
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog They're just so incredibly unserious.
-
@GossiTheDog I am absolutely lost trying to understand where VS Code (or Codium, for that matter) gets its extensions from and how to check which version was installed when from which source.
BTW: I prefer text editors with a small attack surface ...
@herrleon @GossiTheDog For desktop linux try Pluma, its part of the MATE suite, uses a tradtional keyboard and mouse UI/interface, supports both x11 and windows, is extensible by plugins and is by default 100% offline. Of course, making something like a Google drive part of your set of mounted filesystems might compromise the whole system.
-
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog
I don't understand, the article says "Claude Code for VS Code extension bundle **ON** the Cursor Marketplace" (whatever it means), you say AND. It's quiet different in term of impact. -
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
@GossiTheDog ah I just wanted to ask that - all public information says: that's a cursor plugin so the scope is luckily much more limited in this case - right?
-
@RandamuMaki @GossiTheDog I mean, aside from Patrick Stewart, yeah, for sure.
But if the Binance breach is linked to the Claude supply chain breach, yeah, #AI float crashes into #crypto hack, I will be overdosing on schadenfreude
@BernardSheppard @GossiTheDog Yeah, the transporter chief sent him to the wrong destination.
-
@GossiTheDog with a logo like that, are people really surprised about a backdoor?
At least they're using trojans when accessing that back door.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I was barely awake this morning until my partner casually told me about this. Amazing alarm clock that's actually alarming
-
@GossiTheDog ah I just wanted to ask that - all public information says: that's a cursor plugin so the scope is luckily much more limited in this case - right?
@dalini @GossiTheDog various things use OpenVSX. Including many VS Code forks including VS Codium
-
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
@GossiTheDog well of course the malicious version was prob developed in DPRK
-
@GossiTheDog I'm having the best week of schadenfreude, I swear...
@RandamuMaki Was my spontaneous feeling, too. What could go wrong?! 🤭 @GossiTheDog
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog here's a detection #osquery for #macos, in case it helps anyone
https://gist.github.com/RichardoC/9753dfa5aeffc6a1201f5e57114f54ff
-
FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
@GossiTheDog
A bullet dodged
for once I was lucky to run old software -
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
@GossiTheDog It seems 2.1.313 is missing from Claude Code's GitHub repo too. https://news.ycombinator.com/item?id=50302650
No tag or mention in CHANGELOG.md for 2.1.313.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Stupid question: If AI is such a great tool to find bugs, flaws etc, as Anthropic keeps telling us again and again and again, why did it not find the backdoor in their own packages?
Must be a miracle happening
-
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog was the Claude Code cli affected as well or are we cli users good? TBF I'm still running 2.1.301 because I haven't updated NixOS in a while
-
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
@GossiTheDog I expected a "Malicious official Claude Code extension on VScode" to be... louder?
I'm not sure if it was an incident beyond cursor marketplace. Enough time has passed to see more information if it was that large scale. -
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
RE: https://infosec.exchange/@RichardoC/117529759531517074
MacOS OSQuery hunting queries:
-
@GossiTheDog here's a detection #osquery for #macos, in case it helps anyone
https://gist.github.com/RichardoC/9753dfa5aeffc6a1201f5e57114f54ff
@RichardoC - how do we run this? can you give a brief?
-
@GossiTheDog I expected a "Malicious official Claude Code extension on VScode" to be... louder?
I'm not sure if it was an incident beyond cursor marketplace. Enough time has passed to see more information if it was that large scale.@moh53n @GossiTheDog to be honest I expected VScode incidents to be more common, has that happy extension wild west feel like browser extensions before people started trading in them.
