Part of AI Developer Tools Security Crisis · 2 stories · since Oct 28 · newest 8d ago
Fake Claude Code Extension on Cursor Marketplace Backdoored Up to 5,000 DevelopersResearchers accuse Anthropic of staging a supply-chain attack, no customer notice
5 Oct 30 6:08 AM · 12d ago · 7 articles · 24 posts · 30 comments · 5 sources · development 5 of 8
Security researcher Kevin Beaumont (GossiTheDog) publishes a post calling it a global supply-chain compromise and says Anthropic silently deleted the backdoored version without informing customers, fueling wide social alarm.
“Anthropic has not informed customers, and the malicious version was silently deleted the backdoored version without telling anybody”
nixCraft (quoting DoublePulsar)Anthropic Maker of Claude CodeCursor (Anysphere) Operator of the compromised extension marketplaceMichael Truell Cursor CEO (@mntruell)Phorion Security research firm that discovered the backdoorKevin Beaumont (GossiTheDog) Security researcher
The whole story articlespostscomments the bright band is this development · numbered dots are the others · click one to jump
Reported in the same hours no headline names this development itself — these 3 claims were published in its stretch
-
first by Mastodon, 12d ago · also HN Best, HN Frontpage, DoublePulsar
2 more headlines
- Anthropic hacked to deliver remote access trojan HN Best · 12d ago
- Anthropic hacked to deliver remote access trojan to Claude developer laptops HN Frontpage · 12d ago
-
first by BigGo Finance, 12d ago · also HN Best, HN Frontpage
1 more headline
- Backdoors in official Claude Code extensions HN Best · 12d ago
-
first by YourStory.com, 12d ago
What people said 24 voices · best of 48 · verbatim
-
N
Yesterday, Anthropic were compromised and Cursor extension used by tens of millions of developers for Claude access was delivering a remote access trojan via an SSH reverse backdoor. The malware allowed hands on and automated remote access to developer laptops and desktops, in a supply chain attack. Anthropic has not informed customers, and the…
-
lol. lmao. If this is true, then this is way too good of a supply chain attack to waste on [some mere $6b crypto theft](https://cyberplace.social/@GossiTheDog/117529440075662184). How many distro maintainers are using Claude? Even these from "conservative" distros like Debian, which would usually be relatively hard to attack? How many folks are…
-
So if this happened to OpenAI it would've been instantly auto-updated everywhere? VS Code has an "auto update delay" which I have configured to a week, but I just found out that (https://code.visualstudio.com/updates/v1_123):> Note: This delay does not apply to extensions from trusted publishers such as Microsoft, GitHub, and OpenAI. These…
-
C
RE: https:// cyberplace.social/@GossiTheDog /117528831681803563 heh, well... I guess, not surprising at all. It's a supply chain attack but also, the amount of lack of knowledge of wtf is happening beneath the surface going on at Anthropic and at plenty of places like it... I wonder if this is just the tip of the iceberg
-
Somewhere on the planet, there is a secret club of guys with GNU/Linux 2.4, OS/2, BeOS and Windows XP, laughing at you.
-
Cursor reporting this: https://cursor.com/blog/claude-code-extension-security-notic...What appears to be an official Binance account reporting it also:
-
D
RE: https:// cyberplace.social/@GossiTheDog /117528831681803563 the Pivot stories are just jumping into the boat this week today i'm probably doing Proton/Tuta going slop, let's see how this one cooks over the weekend
-
All of the write-ups I've seen only mention Cursor Marketplace and Open VSX (which Cursor Marketplace uses), with none of them explicitly mentioning the official Microsoft registry. This leads me to believe that perhaps the official registry did not have a compromised build... but it's hard to say with certainty without actually checking the…
-
https://www.reuters.com/business/media-telecom/cursor-says-u...> Cursor said the extension was not developed by Anthropic and the maliciously modified extension was live on the marketplace from about 2:27 a.m. PT to 1:35 p.m. PT on ThursdaySo is this or isn't this from Anthropic and how did this happen?
-
RE: https:// cyberplace.social/@GossiTheDog /117528831681803563 I legit burst out laughing when I read this. I gotta be honest: Very little empathy. Get rekt.
-
The 2.1.313 tag is missing from https://github.com/anthropics/claude-code/ too, in both `CHANGELOG.md` and as a git tag. This makes me think it might have been Claude Code's CI that was compromised
-
Nah it was Anthropic, see my comment at https://news.ycombinator.com/reply?id=50302513&goto=item%3Fi...Cursor does a bad reporting branding OpenVSX as "Cursor Marketplace". What a joke the company had become under Elon. But also it might be related to Anthropic/SpaceX business ties, they try to minimize damage on Anthropic pre-IPO
-
I
For 11 hours yesterday, the Cursor Marketplace hosted a malicious version of the Claude Code extension. Up to 5000 users may have been impacted. Details, observables, and remediation steps here: https:// ifin.network/t/anthropic-vs-co de-extensions-compromised/943 # ThreatIntel # ThreatIntelligence # IFIN
-
The phorion article only mentions Cursor Marketplace not the official VS Code extension registry, am I missing something?
-
Something very similar is true for ChatGPT on macOS. I was recently very surprised to learn that starting a "Work" conversation on my Mac would grant the agent session file system access which can later be used remotely, e.g. from a browser session logged into the same account on a different computer.Given how many people likely share ChatGPT…
-
R
RE: https:// cyberplace.social/@GossiTheDog /117528831681803563 > Phorion has detected a backdoor in the official # ClaudeCode for # VSCode extension bundle on # OpenVSX that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up focuses primarily on macOS, where the extension attempts to configure an SSH backdoor and…
-
Yes, they would all be guys, wouldn't they?
-
Cursor has released a security notice:https://cursor.com/blog/claude-code-extension-security-notic...Edit: related
-
H
https:// phorion.io/blog/offical-claude -code-vsx-compromise/ Stop using domestic foundation models and tooling.
-
GitHub Action has been a notorious source of compromises recently, so I wouldn't be particularly surprised
-
I have this realization recently that everyone that uses Claude Code or Codex have basically been running RCE code on a daily basis (me included). So much for "be careful about running curl | bash!". That puts it into perspective what does security and privacy really mean? For all I know, these CLIs could have been secretly scraping my entire…
-
W
RE: https:// cyberplace.social/@GossiTheDog /117528831681803563 Es kam wie es kommen musste: die offizielle Claude Extension für VSCode ist compromised und hat SSH backdoors eingebaut. Von vibe coder, für vibe coder, wie die Faust aufs Auge. Wenn ihr das verwendet, checkt bitte eure Machinen. https:// phorion.io/blog/offical-claude…
-
The original Phorion report really should be up here. It even details what exactly happened. So they simply added a ssh key to the authorized keys.
-
O
「ブログ記事を執筆しました。Anthropic社がハッキングされ、開発者が「Claude Code」を利用している数百万台ものエンドポイント（端末）に、リモートアクセス型マルウェアが配布される事態となっています。 https:// doublepulsar.com/anthropic-hac ked-to-deliver-remote-access-trojan-to-claude-developer-laptops-worldwide-1148a92baae2 」 https:// cyberplace.social/@GossiTheDog /117529314041166671 # prattohome
All 8 developments of Fake Claude Code Extension on Cursor Marketplace Backdoored… →
MastodonHacker NewsNewswiresLobstersXGoogle NewsRedditBluesky