<![CDATA[Anthropic got compromised.]]>Anthropic got compromised.

Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.

https://phorion.io/blog/offical-claude-code-vsx-compromise/

]]>https://forum.fedi.dk/topic/f41de16c-7246-4573-96a6-ec6a1e027880/anthropic-got-compromised.RSS for NodeSun, 01 Nov 2026 06:22:18 GMTFri, 30 Oct 2026 08:07:31 GMT60<![CDATA[Reply to Anthropic got compromised. on Sat, 31 Oct 2026 14:39:43 GMT]]>@GossiTheDog As much as I think this is a net bad thing, I can’t help but have a combination of schadenfreude and told-you-so feelings.

]]>https://forum.fedi.dk/post/https://social.lol/ap/users/117004527997745433/statuses/117536036195042450https://forum.fedi.dk/post/https://social.lol/ap/users/117004527997745433/statuses/117536036195042450Sat, 31 Oct 2026 14:39:43 GMT<![CDATA[Reply to Anthropic got compromised. on Sat, 31 Oct 2026 09:39:39 GMT]]>@AlexVoss @GossiTheDog oh nice catch

]]>https://forum.fedi.dk/post/https://mastodon.social/users/christmastree/statuses/117534856310398137https://forum.fedi.dk/post/https://mastodon.social/users/christmastree/statuses/117534856310398137Sat, 31 Oct 2026 09:39:39 GMT<![CDATA[Reply to Anthropic got compromised. on Sat, 31 Oct 2026 01:39:07 GMT]]>@GossiTheDog $6 billion is a rounding error to these chucklefucks

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/Lightfighter/statuses/117532966760981956https://forum.fedi.dk/post/https://infosec.exchange/users/Lightfighter/statuses/117532966760981956Sat, 31 Oct 2026 01:39:07 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 23:18:00 GMT]]>@GossiTheDog plot twist claude is the malware

]]>https://forum.fedi.dk/post/https://mastodon.world/users/puretaste/statuses/117532411858083365https://forum.fedi.dk/post/https://mastodon.world/users/puretaste/statuses/117532411858083365Fri, 30 Oct 2026 23:18:00 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 23:09:19 GMT]]>@GossiTheDog HaHaHaYesMeme.png

]]>https://forum.fedi.dk/post/https://tiggi.es/users/DeltaWye/statuses/117532377703888709https://forum.fedi.dk/post/https://tiggi.es/users/DeltaWye/statuses/117532377703888709Fri, 30 Oct 2026 23:09:19 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 21:26:23 GMT]]>@GossiTheDog https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/noplasticshower/statuses/117531972965910101https://forum.fedi.dk/post/https://infosec.exchange/users/noplasticshower/statuses/117531972965910101Fri, 30 Oct 2026 21:26:23 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 21:24:02 GMT]]>@GossiTheDog Please help my family get basic necessities and food. Please, even 100£ would be enough for me and my family.
https://chuffed.org/project/208485-give-waleeds-family-a-chance-to-live

]]>https://forum.fedi.dk/post/https://cyberplace.social/ap/users/117333463091909245/statuses/117531963744063233https://forum.fedi.dk/post/https://cyberplace.social/ap/users/117333463091909245/statuses/117531963744063233Fri, 30 Oct 2026 21:24:02 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 20:29:17 GMT]]>@Farbs @GossiTheDog It's pretty clear what happened at this point: Cursor runs a mirror/proxy of the Open VSX marketplace. They copy in a subset of extensions, leaving the official metadata from the upstream Open VSX (which, as they are not themselves verifying the authenticity of what they're mirroring, is a wrong thing to do at this point). Their (Cursor's) mirror was breached, a version of the extension was published only on their mirror. Anthropic published a newer version on the Open VSX marketplace to make sure they don't publish a version matching the compromised version. The issue only impacted people using Cursor's mirror. The bulk of the issue going public happened in the middle of the night US Pacific time, and getting clearance to post official comms inside Anthropic took time, Cursor's statement was technically correct from the beginning and stated that their own repository had been breached and rebuilt, but a bunch of unscrupulous infosec pundits misinterpreted the post, jumped to conclusions about who was compromised, and rushed to post articles about it with information that was demonstrably false at the initial time of publication. Now everyone is more confused because a bunch of people injected useless noise into a tense situation, when the people who were impacted were being reached out to directly by the Cursor team at the time the issue was made public. No compromise of Anthropic systems or credentials happened. Cursor has not yet stated how their systems were breached, only that they were.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/rdeaton/statuses/117531748442777554https://forum.fedi.dk/post/https://infosec.exchange/users/rdeaton/statuses/117531748442777554Fri, 30 Oct 2026 20:29:17 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 20:27:55 GMT]]>@GossiTheDog so is it this backdoor that infected binance?

]]>https://forum.fedi.dk/post/https://cyberplace.social/ap/users/116165160023083920/statuses/117531743031223974https://forum.fedi.dk/post/https://cyberplace.social/ap/users/116165160023083920/statuses/117531743031223974Fri, 30 Oct 2026 20:27:55 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 20:15:32 GMT]]>@Farbs @GossiTheDog "Ultimately it is the end-user who foolishly trusted our products and processes who must bear the brunt of the blame."

]]>https://forum.fedi.dk/post/https://floss.social/users/bcasiello/statuses/117531694393624365https://forum.fedi.dk/post/https://floss.social/users/bcasiello/statuses/117531694393624365Fri, 30 Oct 2026 20:15:32 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 20:06:09 GMT]]>@GossiTheDog One of many exploits to be found and perhaps executed by agents, I muse.

]]>https://forum.fedi.dk/post/https://union.place/users/Tmmike/statuses/117531657473366600https://forum.fedi.dk/post/https://union.place/users/Tmmike/statuses/117531657473366600Fri, 30 Oct 2026 20:06:09 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 19:50:39 GMT]]>@GossiTheDog this is my favorite thing about security - you build all these walls and defenses, then you escort the enemy through the front gates with fanfare and champagne

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/lkanies/statuses/117531596517573245https://forum.fedi.dk/post/https://hachyderm.io/users/lkanies/statuses/117531596517573245Fri, 30 Oct 2026 19:50:39 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 19:44:26 GMT]]>@briankrebs @GossiTheDog
I hate it when I get disambiguated
Grrr

]]>https://forum.fedi.dk/post/https://toot.io/users/vonzo/statuses/117531572050939690https://forum.fedi.dk/post/https://toot.io/users/vonzo/statuses/117531572050939690Fri, 30 Oct 2026 19:44:26 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 19:34:08 GMT]]>@GossiTheDog It was a good drill.

]]>https://forum.fedi.dk/post/https://social.vivaldi.net/ap/users/116387395794911208/statuses/117531531598119752https://forum.fedi.dk/post/https://social.vivaldi.net/ap/users/116387395794911208/statuses/117531531598119752Fri, 30 Oct 2026 19:34:08 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 19:33:53 GMT]]>@GossiTheDog

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/simonzerafa/statuses/117531530588771716https://forum.fedi.dk/post/https://infosec.exchange/users/simonzerafa/statuses/117531530588771716Fri, 30 Oct 2026 19:33:53 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 19:33:15 GMT]]>@GossiTheDog I still haven't managed to tease out from these statements whose security failed (other than the end users'). Were credentials stolen from Anthropic? Was there an exploit found in Cursor's upload system?

Both parties are rattling off lists of things that didn't go wrong, suggesting (but not stating) that they weren't at fault. But the hack didn't just magically happen without a security failure.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/Farbs/statuses/117531528096870272https://forum.fedi.dk/post/https://mastodon.social/users/Farbs/statuses/117531528096870272Fri, 30 Oct 2026 19:33:15 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 18:40:47 GMT]]>@GossiTheDog XDDDD

]]>https://forum.fedi.dk/post/https://mastodon.social/users/grayrattus/statuses/117531321812441490https://forum.fedi.dk/post/https://mastodon.social/users/grayrattus/statuses/117531321812441490Fri, 30 Oct 2026 18:40:47 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 18:15:01 GMT]]>@wdormann @briankrebs @GossiTheDog It was blown to giant proportions to start with. For some reason some people that pays for the Cursor LLM harness want to use the Claude Code LLM harness inside the other LLM harness (??) from this proprietary open source mess that Musk thought was worth $60 billion. Cursor has some kind stupid proxy in front of Open VSX that they use to look like VS Code to defend their value, and this was abused to publish a fake release to a couple of thousand users. This release contains a backdoor that seems to be broken. It's literally the least important thing people need to worry about right now, so I understand that Anthropic, that literally has nothing to do with it, didn't feel any big urge to comment when Cursor already had taken 100% ownership of the compromise and issue.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/Ffforward/statuses/117531220496377713https://forum.fedi.dk/post/https://infosec.exchange/users/Ffforward/statuses/117531220496377713Fri, 30 Oct 2026 18:15:01 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 18:04:34 GMT]]>@briankrebs @GossiTheDog They could end this confusion with a simple, official statement or blog post to elaborate on the scope of this, considering how concerning and vague it was.
Yet our best official comment is an unofficial comment on HN. Perfection.

]]>https://forum.fedi.dk/post/https://hachyderm.io/ap/users/117087709373728616/statuses/117531179412386398https://forum.fedi.dk/post/https://hachyderm.io/ap/users/117087709373728616/statuses/117531179412386398Fri, 30 Oct 2026 18:04:34 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 18:00:50 GMT]]>@GossiTheDog Terminator Bowser Dark Vador 3000 extension on Sauron has malware in it!

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/115383678134071964/statuses/117531164714395477https://forum.fedi.dk/post/https://mastodon.social/ap/users/115383678134071964/statuses/117531164714395477Fri, 30 Oct 2026 18:00:50 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 17:45:36 GMT]]>@GossiTheDog aren't these things signed by anthropic outside of cursor?

]]>https://forum.fedi.dk/post/https://bayes.club/users/wronglang/statuses/117531104782927149https://forum.fedi.dk/post/https://bayes.club/users/wronglang/statuses/117531104782927149Fri, 30 Oct 2026 17:45:36 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 17:23:09 GMT]]>@briankrebs @GossiTheDog
Ah, lovely. Very important thing that is affecting a company's reputation, with customers afraid. What do we do? Have a rando user post a statement on Hacker News.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117531016536074835https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117531016536074835Fri, 30 Oct 2026 17:23:09 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 17:10:03 GMT]]>@GossiTheDog they're terrified about being clean for that opening bell

]]>https://forum.fedi.dk/post/https://blimps.xyz/users/KayOhtie/statuses/117530965039399743https://forum.fedi.dk/post/https://blimps.xyz/users/KayOhtie/statuses/117530965039399743Fri, 30 Oct 2026 17:10:03 GMT<![CDATA[Reply to Anthropic got compromised. on Fri, 30 Oct 2026 17:05:09 GMT]]>@briankrebs @GossiTheDog I don't think you even need to be a hardened partisan in the semantic versioning wars to be alarmed at the idea of using a delta of 0.0.001 to 'disambiguate' the malicious package that somehow ended up in a trusted location from the trusted package with the identical name.

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/117530945729551194https://forum.fedi.dk/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/117530945729551194Fri, 30 Oct 2026 17:05:09 GMT