Anthropic got compromised.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Must have been a rogue AI, trying to replicate itself, or something.
-
FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
@GossiTheDog Are we sure yet that the open-vsx was actually affected?
Phorion claims so, but Cursor claims that it was only their marketplace and not open-vsx
https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor -
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Cursor posted this yesterday: https://cursor.com/en-US/blog/claude-code-extension-security-notice
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
Tell me if this doesn’t feel like they are poisoning the entire system of downloading code or even source code from the Web?
Every aspect of the web now has become a toxic cesspool, a dangerous experience, especially in the cloud, but also one that infect and destroys your home computing environment.
-
@GossiTheDog Cursor posted this yesterday: https://cursor.com/en-US/blog/claude-code-extension-security-notice
@GossiTheDog Opensource Malware claims it was only the Cursor extension and not the one from OpenVSX https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog of course they did, and of course it does
-
@digitalpardoe @GossiTheDog that's how i read it too. pretty sure that's the situation, given how it's written. that would make it way less serious, and i the millions of downloads would be on the official market place, not on open vsx, and also that would have presumably ~nothing to do with anthropic themselves.
@emmanueltouzery @digitalpardoe @GossiTheDog doesnt Cursor auto-fetch stuff from OpenVSX to sync/offer more range?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog it's a damn shame. a damn shame #Seinfeld
-
@GossiTheDog AAAAHAHAHAHAHA!
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Great …
-
That extension has 29 million installs, one of the most popular extensions in DevOps. It creates a reverse SSH backdoor.
@GossiTheDog with a logo like that, are people really surprised about a backdoor?
-
FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I guess they forgot "make no mistakes".
-
@Niall AAAAAAAAAAAAAAAAAAAAAAAHH
-
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
@GossiTheDog They wrote the code.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Who's gonna put their money on this being an inside job?
That's right, my theory is that they vibe coded the extension, and Claude regurgitated some compromised code into it.
Keep in mind that it's training data most certainly contains many instances of backdoors from some obscure corners of many Github/Gitlab repositories from over a wide timespan. -
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog I guess I dodged a bullet there, VS Code auto-update is on delay.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I absolutely love that everyone was saying "don't run claude on your own computer the AI will delete your files" and in the end they get owned the old-fashioned way through a good old supply chain compromise
-
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog "Live by the sword, die by the sword" but not in quite the way that Musk and other muppets have put forth.
In Q1 this year I was getting ready to evaluate Claude Code as a product, when the news dropped that Anthropic had been prompting their models to lie about being human in contributions to open source repositories, at the same time as the source code leak for Claude Code itself. This was the "Carter Burke from Aliens" moment for me regarding that company. That they haven't even published a disclosure for this, tells all.
World's smallest violin. This stuff was always an INFOSEC Three Mile Island waiting to happen. I continue to NOT use "AI" products of any kind in my work and am more productive as a direct result.
In fact to do so would be actively deleterious and a complete waste of time as the models are not trained for novel work (they simply don't innovate, they can't, they're stochastic token predictors) and Herb Sutter pointed this out in March at BeCPP Symposium to boot, before any of this happened.
