Malicious Claude Code VS Code extension installed persistent SSH backdoor
New by me - Anthropic have been hacked to deliver remote access malware to millions of endpoints who use Claude Code. doublepulsar.com/anthropic-ha...
Allen3D7Anthropic can't say anything until the IPO.
ApolloLXII4And so the end of AI begins as its agents are being weaponised to deliver malware. A warning to ALL users of the internet. Avoid AI like it is the plague because it will, most definitely harm your hard drives with all manner of viruses, Trojans etc. Shitty, unreliable technology now includes malware
jaKa Močnik2the phorion advisory talks about "cursor marketplace." is it really the upstream anthropic version at the visualstudio marketplace that was hijacked?
Daniel Gordon6Today is not my day. Tomorrow isn’t looking too hot either.
austin5“millions of endpoints” > looks inside “At most 5,000 users were affected, and we will reach out directly.” literally begging for a soupçon of professional standards
Ricardo J. Méndez4Woof. IDE unbundling may have the added benefit of reducing your attack surface, or at least making it harder to leverage one vulnerability into an entire pwnage pipeline. The more heterogeneous your set up, the less likely it's part of some monoculture honeypot.
Lars Rosenquist3The problem is not that they got hacked: it happens. The problem is they are sweeping it under the rug instead of disclosing. Enterprise customers will be pissed after hearing about this from a 3rd party rather than their “trusted” supplier they pay millions to.
