User avatar
Kevin Beaumont @GossiTheDog@cyberplace.social
2d
Anthropic got compromised.

Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.

phorion.io/blog/offical-claude-code-vsx-compromise/
:NepParty@enby.life:1💜1
3
8
1
2
User avatar
Kevin Beaumont @GossiTheDog@cyberplace.social
2d
That extension has 29 million installs, one of the most popular extensions in DevOps. It creates a reverse SSH backdoor.
1
1
0
0
User avatar
Kevin Beaumont @GossiTheDog@cyberplace.social
2d
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.

The plugin auto updates so every org will have been impacted.
1
2
0
0
User avatar
Kevin Beaumont @GossiTheDog@cyberplace.social
2d
To be clear this is a supply chain attack, the threat actor got reverse SSH (command line) connectivity to Anthropic customer environments at scale.
1
1
0
0
User avatar
Kevin Beaumont @GossiTheDog@cyberplace.social
2d
FWIW the compromised version, 2.1.313, was removed from OpenVSX. 2.1.314 is the ‘fixed’ version.
1
0
0
0
User avatar
Kevin Beaumont @GossiTheDog@cyberplace.social
2d
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor cursor.com/blog/claude-code-extension-security-notice

Anthropic still haven't admitted what has happened.
1
2
0
0
User avatar
Kevin Beaumont @GossiTheDog@cyberplace.social
1d
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.

doublepulsar.com/anthropic-hacked-to-deliver-remote-access-trojan-to-claude-developer-laptops-worldwide-1148a92baae2
2
4
0
0
User avatar
Gaelan Steele @Gaelan@cathode.church
1d
@GossiTheDog you’re the only person I see saying that the version on the official VS Code marketplace (as opposed to those of Cursor or OpenVSX) was infected - where are you seeing this?
1
0
0
0
User avatar
nicole @mkljczk@twojstary.gay
1d
@Gaelan @GossiTheDog because they published the clean 2.1.314 release in VS Code marketpace as well, I think
1
0
4
0
User avatar
Gaelan Steele @Gaelan@cathode.church
1d
@mkljczk @GossiTheDog doesn’t seem impossible that they did that out of an abundance of caution, or to simplify the advice (saves them explaining that 2.1.313 is fine in everything but Cursor)
1
0
1
0
User avatar
nicole @mkljczk@twojstary.gay
1d
@Gaelan @GossiTheDog well, they probably wouldn't be able to publish actual 2.1.313 for cursor/openvsx/whatever so they'd have to skip it to avoid per-marketplace versioning lmao
1
0
1
0
User avatar
nicole @mkljczk@twojstary.gay
1d
@Gaelan @GossiTheDog unpublished extension would probably stay visible in vscode marketplace code.visualstudio.com/api/working-with-extensions/publishing-extension#unpublishing-extensions
1
0
1
0
User avatar
nicole @mkljczk@twojstary.gay
1d
@Gaelan @GossiTheDog apparently they don't stay visible as in the api response for nx console i don't see anything about 18.95.0?
0
0
0
0