Official Claude Code VS Code extension trojanized to install persistent SSH backdoor, 29M installs at risk
feelspeaceman · reddit · 2026-10-30
Security researchers disclose that the official Anthropic Claude Code extension on the marketplace (29M+ installs) was trojanized to plant a persistent SSH backdoor on infected hosts, linked to an attack that also delivered remote access trojans to Anthropic developer laptops. Claude Code users are urged to check extension versions and suspicious SSH configs/keys.
More from coding & agent
- Meta's coding model Muse Ember goes live on OpenRouter for agent sub-task fan-out — alexandr_wang · 2026-11-10
- Meta's Muse Ember coding model is now available in OpenCode — alexandr_wang · 2026-11-10
- OpenRSI scales recursive self-improvement to SGLang-Omni, +7.6%–344% throughput via 14 merged PRs — ChengleiSi · 2026-11-10
- OpenCode cuts memory 41% and OpenClaw starts 3.1x faster with Bun AoT — steipete · 2026-11-10
- Vibe-coded ambient music DAW 'Ambient Town' in a week with Push support — kieranklaassen · 2026-11-10
- GR00T 2's WAM API lets reasoning agents steer robots by pointing in the camera view — yukez · 2026-11-10