Anthropic got compromised.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog The worst thing about this is knowing that worse things are still to come... the world is going dark.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog without telling I think?
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog the supply chain compromise could (is going to) be immense, and even tagging which LLM was used for what (open source and publicly available) code isn't enough (and with all those that do not disclose AI use or projects that don't require disclosure)... Air gap everything and update nothing? x/
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
Probably no biggie. It's not like anybody would be dumb enough to give a stupid coding extension permission to roam completely free on their computers, right? -
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog damn and people mock me for using basic text editors with no extensions...
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Or in German, "Claude Code klaut Code".
All working as intended.
-
That extension has 29 million installs, one of the most popular extensions in DevOps. It creates a reverse SSH backdoor.
@GossiTheDog Finally a good SSH server for Windows!
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog "tell me how you can be fast and secure with ai again at the same time mr proton man"
(Like, this was initially just a shitpost about his big brain take about security and AI but seriously, aren't they using Claude? Probably in VS Code or Cursor? Does this mean that developers at Proton may have been popped too?)
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog odds on this being a factor in how binance got done over?
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog It’s the Cursor and OpenVSX marketplaces which had the malware versions, but not the VSCode marketplace?
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
I've confirmed Binance use Claude Code on Cursor with this extension.
-
I've confirmed Binance use Claude Code on Cursor with this extension.
Anthropic won't comment, nor are account managers.
-
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog I wonder if they have CRA reporting obligations or not.
-
Anthropic won't comment, nor are account managers.
nitpicking: It's not Visual Studio, the advisory is for VS Code (entirely different product). Last time I checked there wasn't a Claude extension for Visual Studio 2026. -
@GossiTheDog It’s the Cursor and OpenVSX marketplaces which had the malware versions, but not the VSCode marketplace?
from the article at the very top:
> Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up focuses primarily on macOS, where the extension attempts to configure an SSH backdoor and establish persistence.
-
I've confirmed Binance use Claude Code on Cursor with this extension.
@GossiTheDog wow
-
Anthropic won't comment, nor are account managers.
-
@Gaelan @GossiTheDog because they published the clean 2.1.314 release in VS Code marketpace as well, I think
