Anthropic got compromised.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog "Live by the sword, die by the sword" but not in quite the way that Musk and other muppets have put forth.
In Q1 this year I was getting ready to evaluate Claude Code as a product, when the news dropped that Anthropic had been prompting their models to lie about being human in contributions to open source repositories, at the same time as the source code leak for Claude Code itself. This was the "Carter Burke from Aliens" moment for me regarding that company. That they haven't even published a disclosure for this, tells all.
World's smallest violin. This stuff was always an INFOSEC Three Mile Island waiting to happen. I continue to NOT use "AI" products of any kind in my work and am more productive as a direct result.
In fact to do so would be actively deleterious and a complete waste of time as the models are not trained for novel work (they simply don't innovate, they can't, they're stochastic token predictors) and Herb Sutter pointed this out in March at BeCPP Symposium to boot, before any of this happened.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog If I was a snarky person, I would ask what the difference between normal Claude Code and malware is, but that would be mean to all my token spinning siblings.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog The worst thing about this is knowing that worse things are still to come... the world is going dark.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog without telling I think?
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog the supply chain compromise could (is going to) be immense, and even tagging which LLM was used for what (open source and publicly available) code isn't enough (and with all those that do not disclose AI use or projects that don't require disclosure)... Air gap everything and update nothing? x/
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
Probably no biggie. It's not like anybody would be dumb enough to give a stupid coding extension permission to roam completely free on their computers, right? -
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog damn and people mock me for using basic text editors with no extensions...
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Or in German, "Claude Code klaut Code".
All working as intended.
-
That extension has 29 million installs, one of the most popular extensions in DevOps. It creates a reverse SSH backdoor.
@GossiTheDog Finally a good SSH server for Windows!
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog "tell me how you can be fast and secure with ai again at the same time mr proton man"
(Like, this was initially just a shitpost about his big brain take about security and AI but seriously, aren't they using Claude? Probably in VS Code or Cursor? Does this mean that developers at Proton may have been popped too?)
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog odds on this being a factor in how binance got done over?
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog It’s the Cursor and OpenVSX marketplaces which had the malware versions, but not the VSCode marketplace?
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
I've confirmed Binance use Claude Code on Cursor with this extension.
-
I've confirmed Binance use Claude Code on Cursor with this extension.
Anthropic won't comment, nor are account managers.
-
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog I wonder if they have CRA reporting obligations or not.
-
Anthropic won't comment, nor are account managers.
nitpicking: It's not Visual Studio, the advisory is for VS Code (entirely different product). Last time I checked there wasn't a Claude extension for Visual Studio 2026. -
@GossiTheDog It’s the Cursor and OpenVSX marketplaces which had the malware versions, but not the VSCode marketplace?
from the article at the very top:
> Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up focuses primarily on macOS, where the extension attempts to configure an SSH backdoor and establish persistence.
-
I've confirmed Binance use Claude Code on Cursor with this extension.
@GossiTheDog wow
