Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Anthropic hacked - Malware inserted in official Claude Code plugins for VS Code and Cursor

Yesterday, Anthropic were compromised and a Visual Studio Code and Cursor extension used by tens of millions of developers for Claude access was delivering a remote access trojan via an SSH reverse backdoor. The malware allowed hands on and automated remote access to developer laptops and desktops, in a supply chain attack.

Anthropic has not informed customers, and silently deleted the backdoored version without telling anybody.

The extension itself auto updated in Visual Studio Code (VSCode) and Cursor to the malicious version. The extension has over 40 million installations.

https://doublepulsar.com/anthropic-hacked-to-deliver-remote-access-trojan-to-claude-developer-laptops-worldwide-1148a92baae2

If you use the Claude Code plugins in either VS Code or Cursor you should check your SSH authorized_keys file and check for other compromise activity in your dev environment because the plugin auto-updates so it may well have quietly installed malware without you noticing.

Comments

Sign In or Register to comment.