Official Claude Code VS Code Extension Trojanized: v2.1.313 Plants SSH Backdoor
jd_pressman · x · 2026-10-30
The official Claude Code VS Code extension was compromised via a supply-chain attack. Version 2.1.313 published to Open VSX contains a 66-line malicious loader prepended to the legitimate code, which adds an attacker-controlled SSH key, attempts to enable the local SSH service, opens a reverse tunnel to 134.209.82.225, installs persistence, and beacons host reconnaissance over unencrypted HTTP.
The affected extension is owned by Anthropic employee Igor Kofman; it's unclear whether his account was compromised or the publishing pipeline was abused. The unpacked extension otherwise matches the official build — only extension.js differs. Threat reports were created for version 2.1.313 across Open VSX, the VS Code Marketplace, and npm out of caution.
More from coding & agent
- Mintive raises $11M to give enterprise AI agents their own identities and permissions — dunkhippo33 · 2026-10-30
- Cartesia voice agent demo: AI dental receptionist handles interruptions naturally — haider1 · 2026-10-30
- korea-data-mcp fixes 47 data traps that mislead agents reading Korean public data — youngtipted · 2026-10-30
- RAGEN ranks 3rd hardest in FrontierCS 2, built on hand-written code — wzenus · 2026-10-30
- LLM panel screens 15,034 records into 489 studies with 1.00 sensitivity — maier_ak · 2026-10-30
- 'Get eval right and training becomes easy': a blunt take on evals-first training — yunta_tsai · 2026-10-30