Official Claude Code VSCode Extension Compromised: Trojanized v2.1.313 Plants SSH Backdoor
jedisct1 · x · 2026-10-30
A malicious version (2.1.313) of the official Claude Code VSCode extension was published to the Open VSX registry with a 66-line loader prepended to extension.js. It adds an attacker-controlled SSH key, enables the local SSH service, opens a reverse tunnel to 134.209.82.225, installs persistence, and beacons host recon over plain HTTP. The bundled binary itself is the official one; only extension.js was modified. The extension's publisher is Anthropic employee Igor Kofman — it's unclear whether his account or the publishing pipeline was compromised. Threat reports were also created for the Microsoft Marketplace version out of caution.
More from coding & agent
- Mistral open-weights 1T-param Le Chonk; TRL day-0 LoRA SFT on a single node — FerdinandMom · 2026-10-30
- LFM2.5 Pi LoRA goes GGUF: run the RL-trained agent adapter in llama.cpp — yb2698 · 2026-10-30
- Pi-100 steps hit best tradeoff: LFM2.5 LoRA cuts 37% tool calls — yb2698 · 2026-10-30
- LFM2.5-24B LoRA adapters for Pi and Claude Code cut tool calls up to 40% — yb2698 · 2026-10-30
- An 83-Tool MCP Server Cut AI Bad Calls to 1 in 290: Four Lessons — fcf41 · 2026-10-30
- How High Should You Set a Model's Reasoning Level for AI Coding? — TgnOrdaX · 2026-10-30