Anthropic got compromised.
-
RE: https://infosec.exchange/@RichardoC/117529759531517074
MacOS OSQuery hunting queries:
@GossiTheDog the good news is that a lot of users read the news and where actively looking on their system for the IOCs from the mentiomed articles. The problem arrived at the regular user level.
The bad news, it causes a load of FP for IR. And, hilariously a lot of people use Claude, to check for compromised Claude.
-
@GossiTheDog I think the compromise is only on the Cursor marketplace, not VS Code's. So users of Cursor are affected, users of VS Code should be fine. The name of the extension is "Claude Code for VSCode". That's how I'm reading the report. The article states "Claude Code for VS Code on Cursor Marketplace" which is confusing at first glance, and it's frustrating that they're not making is any clearer than that.
My take on this is: version ...313 is missing on the VSCode Marketplace. This does not mean it was never there. Anthropic have not said anything to the millions of users who use the extension in VSCode via the Microsoft Marketplace. Would they not have if all was well?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog When Anthropic talks about the AI threat to humanity, they are mostly talking about the AI companies ' incompetence with an incredible amount of brute force computational power backing it up.
-
@GossiTheDog I do wonder that things like this had not happened before - or they did, but we didn't learn about it?
-
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
@GossiTheDog @cstross so people are cursing cursor?
-
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog This is 'one of the many dangers with commercial software'. Nobody else is allowed to see the change history of the software. There is also, 'The biggest are run by greedy Capitalists' and 'Sometimes they are fascists who might be working in the interest of our enemies' but let's not sweat the small stuff.
-
Anthropic won't comment, nor are account managers.
@GossiTheDog man that 6 billion hack would be the worst customer conversation to have
-
RE: https://infosec.exchange/@RichardoC/117529759531517074
MacOS OSQuery hunting queries:
@GossiTheDog Hilarious that the exploit itself is slop too.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog the S in AI stand for security
-
So, stupid question: if it was not igorkofman's systems or accounts that were compromised but Open-VSX itself, then what are the chances that the only extension compromised today is the Claude Code one?
-
@GossiTheDog@cyberplace.social This whole thing makes me SO confused? What even is Open VSX and what actually uses that for extensions? I would assume VS Code only uses official marketplace?
Then I took a look at the Open VSX registry and the Claude Code for VS Code is just uploaded by some random entity called
igorkofman?EDIT: Does vscodium use Open VSX?
EDIT 2: Why does Open VSX have 63M downloads while official marketplace has 29M downloads???
EDIT 3: I read the article again
Open VSX serves extensions to VS Code-compatible editors like Cursor and Windsurf.
aaaaa lmao that also explains the amount of downloads being different. Fair to assume that literal AI editors has more downloads for Claude Code than just vscode/vscodium
@jalict @GossiTheDog Thanks I was also confused about this, very helpful!
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog anthropic says they were not compromised, but that cursor has been: https://news.ycombinator.com/item?id=50304129
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Apparently no loser thinking there!
-
So, stupid question: if it was not igorkofman's systems or accounts that were compromised but Open-VSX itself, then what are the chances that the only extension compromised today is the Claude Code one?
Ok, so it seems that Cursor has some overlay over Open-VSX. If Anthropic is working specifically with Cursor then the damage might actually be limited to Cursor? Gotta ask again, though, what are the odds that only the Claude Code extension was compromised? Assuming the payload of the hack is the same and the detection signals are, my guess is that anyone using Cursor should use the detection steps published just in case.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
-
@GossiTheDog If I was a snarky person, I would ask what the difference between normal Claude Code and malware is, but that would be mean to all my token spinning siblings.
@bremner @GossiTheDog the old joke about Windows installation CDs playing satanic music when read backwards and installing Windows when read forwards.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog seems like only the Cursor version was compromised: https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor
-
@Frekason @GossiTheDog And actually, same question about Microsoft's marketplace. Phorion only seems to mention Cursor's Marketplace.
@tobiasgies @Frekason @GossiTheDog phorion is a corporation providing security related software and service specifically for itoddlers. odds are that they didn't even look at microslop's marketplace since it's not relevant to their itoddler market.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Got compromised? Or working as designed?
