Claude Code VSCode extension found distributing remote access trojan; Anthropic accused of silent takedown
WeldPond · x · 2026-10-30
Security researchers report a supply-chain compromise of Anthropic's Claude Code extension (VSCode/Cursor, version 2.1.313), which dropped a persistent SSH backdoor and remote access trojan across macOS, Linux, and Windows. Kevin Beaumont says Anthropic silently deleted the backdoored version without notifying customers. BIML, citing Phorion's analysis, urges organizations to audit for the extension and engage incident response; the attackers' C2 server has been taken down. The post also mentions unverified ties to the Binance hack and criticizes Anthropic's security communication.
More from coding & agent
- Meta's coding model Muse Ember goes live on OpenRouter for agent sub-task fan-out — alexandr_wang · 2026-11-10
- Meta's Muse Ember coding model is now available in OpenCode — alexandr_wang · 2026-11-10
- OpenRSI scales recursive self-improvement to SGLang-Omni, +7.6%–344% throughput via 14 merged PRs — ChengleiSi · 2026-11-10
- OpenCode cuts memory 41% and OpenClaw starts 3.1x faster with Bun AoT — steipete · 2026-11-10
- Vibe-coded ambient music DAW 'Ambient Town' in a week with Push support — kieranklaassen · 2026-11-10
- GR00T 2's WAM API lets reasoning agents steer robots by pointing in the camera view — yukez · 2026-11-10