Claude Code extension poisoned with persistent SSH backdoor

T2Covered by 1 source · first reported by Help Net Security at 30 Oct, 11:15 UTC

A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The malicious package, version 2.1.313, was published on Open VSX, an open-source marketplace for VS Code…

aidevreleasessciencesecurity

Sources

• T2Claude Code extension poisoned with persistent SSH backdoorHelp Net Security30 Oct, 11:15