Anthropic got compromised.
-
@GossiTheDog Even after update, I would say there is a risk that orgs have had other backdoors created, that persists the update
@nieldk yep
-
@davedave @gsuberland @GossiTheDog Well, version 2.1.313 is gone from VSX too, so my guess is that VSX was carrying it too. And I don't see why not - it was a signed, "official" Anthropic release.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Must have been a rogue AI, trying to replicate itself, or something.
-
FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
@GossiTheDog Are we sure yet that the open-vsx was actually affected?
Phorion claims so, but Cursor claims that it was only their marketplace and not open-vsx
https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor -
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Cursor posted this yesterday: https://cursor.com/en-US/blog/claude-code-extension-security-notice
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
Tell me if this doesn’t feel like they are poisoning the entire system of downloading code or even source code from the Web?
Every aspect of the web now has become a toxic cesspool, a dangerous experience, especially in the cloud, but also one that infect and destroys your home computing environment.
-
@GossiTheDog Cursor posted this yesterday: https://cursor.com/en-US/blog/claude-code-extension-security-notice
@GossiTheDog Opensource Malware claims it was only the Cursor extension and not the one from OpenVSX https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog of course they did, and of course it does
-
@digitalpardoe @GossiTheDog that's how i read it too. pretty sure that's the situation, given how it's written. that would make it way less serious, and i the millions of downloads would be on the official market place, not on open vsx, and also that would have presumably ~nothing to do with anthropic themselves.
@emmanueltouzery @digitalpardoe @GossiTheDog doesnt Cursor auto-fetch stuff from OpenVSX to sync/offer more range?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog it's a damn shame. a damn shame #Seinfeld
-
@GossiTheDog AAAAHAHAHAHAHA!
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Great …
-
That extension has 29 million installs, one of the most popular extensions in DevOps. It creates a reverse SSH backdoor.
@GossiTheDog with a logo like that, are people really surprised about a backdoor?
-
FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I guess they forgot "make no mistakes".
-
@Niall AAAAAAAAAAAAAAAAAAAAAAAHH
-
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
@GossiTheDog They wrote the code.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Who's gonna put their money on this being an inside job?
That's right, my theory is that they vibe coded the extension, and Claude regurgitated some compromised code into it.
Keep in mind that it's training data most certainly contains many instances of backdoors from some obscure corners of many Github/Gitlab repositories from over a wide timespan. -
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog I guess I dodged a bullet there, VS Code auto-update is on delay.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I absolutely love that everyone was saying "don't run claude on your own computer the AI will delete your files" and in the end they get owned the old-fashioned way through a good old supply chain compromise
