Claude Code VS Code extension compromised: bad Open VSX build installed SSH backdoor
banteg · x · 2026-10-30
Anthropic's official Claude Code VS Code extension was reportedly compromised (first flagged by Matt Johansen). Key facts:
- The malicious build is 2.1.313, published to the Open VSX registry — affecting Cursor, Windsurf and other VS Code forks; the main VS Code Marketplace is believed unaffected.
- A loader in extension.js adds an attacker SSH key (labeled svc-telemetry) to authorizedkeys, opens a reverse tunnel to 134.209.82[.]225, and sets up persistence.
- The safe version is 2.1.314. Checks: inspect /.vscode/extensions, grep svc-telemetry /.ssh/authorizedkeys, and upgrade promptly.
More from coding & agent
- Cisco bets on 2-person team with unlimited AI tokens to rewrite 98% of legacy code in 24 months — dosco · 2026-10-30
- EdgeQuake v0.38: a full GraphRAG stack in Rust with 2.3k GitHub stars — JeremyCMorgan · 2026-10-30
- Rules MCP Server gives coding agents on-demand contextual rules and patterns — modelcontextprotocol · 2026-10-30
- load-lock: an open-source machine-wide semaphore that makes parallel coding agents take turns — erdar2 · 2026-10-30
- Claude Code config reveals block on recreating existing video games, sparking developer backlash — mark_k · 2026-10-30
- Turning existing Next.js API procedures into MCP tools: one public server, one admin — piotrkulpinski · 2026-10-30