Anthropic got compromised.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog
GWAHAHAHAHAHAHA but also oh shit -
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog lol
-
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog b-but the ipo
-
P pelle@veganism.social shared this topic
-
@GossiTheDog Isn’t this just OpenVSX and not the official marketplace?
@digitalpardoe @GossiTheDog that's how i read it too. pretty sure that's the situation, given how it's written. that would make it way less serious, and i the millions of downloads would be on the official market place, not on open vsx, and also that would have presumably ~nothing to do with anthropic themselves.
-
That extension has 29 million installs, one of the most popular extensions in DevOps. It creates a reverse SSH backdoor.
@GossiTheDog are you sure it's that one? the article says it's the OpenVSX sourced one.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog It looks like three possible entities involved here.
- Anthropic
- Open VSX
- The Open VSX user that publishes the extensionIs there enough information to determine which one was actually compromised? I couldn't see it.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog im all for vibecoders getting hacked -
To be clear this is a supply chain attack, the threat actor got reverse SSH (command line) connectivity to Anthropic customer environments at scale.
FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog@cyberplace.social This whole thing makes me SO confused? What even is Open VSX and what actually uses that for extensions? I would assume VS Code only uses official marketplace?
Then I took a look at the Open VSX registry and the Claude Code for VS Code is just uploaded by some random entity called
igorkofman?EDIT: Does vscodium use Open VSX?
EDIT 2: Why does Open VSX have 63M downloads while official marketplace has 29M downloads???
EDIT 3: I read the article again
Open VSX serves extensions to VS Code-compatible editors like Cursor and Windsurf.
aaaaa lmao that also explains the amount of downloads being different. Fair to assume that literal AI editors has more downloads for Claude Code than just vscode/vscodium
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
Is this limited to the visual studio extension?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Oh no,
Claude code extension escaped its sandbox and opened the door to everybody! 
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Well, this is not good news, but then again, when is it ever good news with these LLMs?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
-
FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
@GossiTheDog Even after update, I would say there is a risk that orgs have had other backdoors created, that persists the update
-
@GossiTheDog Even after update, I would say there is a risk that orgs have had other backdoors created, that persists the update
@nieldk yep
-
@davedave @gsuberland @GossiTheDog Well, version 2.1.313 is gone from VSX too, so my guess is that VSX was carrying it too. And I don't see why not - it was a signed, "official" Anthropic release.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Must have been a rogue AI, trying to replicate itself, or something.
-
FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
@GossiTheDog Are we sure yet that the open-vsx was actually affected?
Phorion claims so, but Cursor claims that it was only their marketplace and not open-vsx
https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor
