Anthropic got compromised.
-
@wonka @GossiTheDog Yeah, also, apparently the trojan got only shipped to macOS.
@divVerent @wonka @GossiTheDog
Where do you take that information from? Did they pretend they didn't ship it to windows too somewhere?
-
@Gaelan @GossiTheDog unpublished extension would probably stay visible in vscode marketplace code.visualstudio.com/api/working-with-extensions/publishing-extension#unpublishing-extensions@Gaelan @GossiTheDog apparently they don't stay visible as in the api response for nx console i don't see anything about 18.95.0?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I call it karma for anyone affected.
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog the cackle I cackled
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Jesus Christ
-
@GossiTheDog With "also", do you know whether it affects the marketplace.visualstudio.com release? The advisory you linked to mentions OpenVSX only.
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog If you let AI:s and agent roam around your production environment without oversight or security, you deserve everything that might happen to you.
The recent AI security scare is as if the world IT-workers have gotten mind wiped and are only now relearning basic rules of security that were known 20-30-40 years ago.
-
@GossiTheDog might today’s Polymarket hack be related?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I knew Claude Code was a security disaster waiting to happen
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog Excellent! I will start to use the fact that in my company we do not vibe code and we do not use AI in production as a great unique selling point!
-
That extension has 29 million installs, one of the most popular extensions in DevOps. It creates a reverse SSH backdoor.
@GossiTheDog I am absolutely lost trying to understand where VS Code (or Codium, for that matter) gets its extensions from and how to check which version was installed when from which source.
BTW: I prefer text editors with a small attack surface ...
-
@GossiTheDog I'm having the best week of schadenfreude, I swear...
@RandamuMaki @GossiTheDog I mean, aside from Patrick Stewart, yeah, for sure.
But if the Binance breach is linked to the Claude supply chain breach, yeah, #AI float crashes into #crypto hack, I will be overdosing on schadenfreude
-
@GossiTheDog with no comms from Anthropic, are there any concrete recommendations? I can think of at least one person I know who might be impacted by this.
@huronbikes @GossiTheDog Make sure the device concerned is completely disconnected from any network; forget all known WiFi connections.
Then rotate all API keys, tokens, logged in account sessions, etc, on a clean machine.
You can come back to the compromised machine later, the main thing is to ensure what you have is locked down; that's more important. -
Haha, read that as Binface use Claude Code.
Binface uses trojan on Claude Code.
-
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog They're just so incredibly unserious.
-
@GossiTheDog I am absolutely lost trying to understand where VS Code (or Codium, for that matter) gets its extensions from and how to check which version was installed when from which source.
BTW: I prefer text editors with a small attack surface ...
@herrleon @GossiTheDog For desktop linux try Pluma, its part of the MATE suite, uses a tradtional keyboard and mouse UI/interface, supports both x11 and windows, is extensible by plugins and is by default 100% offline. Of course, making something like a Google drive part of your set of mounted filesystems might compromise the whole system.
-
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog
I don't understand, the article says "Claude Code for VS Code extension bundle **ON** the Cursor Marketplace" (whatever it means), you say AND. It's quiet different in term of impact. -
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
@GossiTheDog ah I just wanted to ask that - all public information says: that's a cursor plugin so the scope is luckily much more limited in this case - right?
-
@RandamuMaki @GossiTheDog I mean, aside from Patrick Stewart, yeah, for sure.
But if the Binance breach is linked to the Claude supply chain breach, yeah, #AI float crashes into #crypto hack, I will be overdosing on schadenfreude
@BernardSheppard @GossiTheDog Yeah, the transporter chief sent him to the wrong destination.
