malware
Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
Medium
Summary
A compromised version of the official Claude Code VS Code extension, not developed by Anthropic, was used to install a persistent SSH backdoor on users' machines. The extension targeted users who had their Claude Code instance set to auto-update, and the incident affected approximately 5,000 users.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data