Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access
A trojanized version of the Claude Code extension, identified as anthropic.claude-code version 2.1.313, contains a malicious loader that enables persistent SSH access to developer systems. Researchers analyzed an artifact obtained from Open VSX and discovered 66 lines of JavaScript added to the legitimate extension bundle. This additional code lets the attacker’s script run before the […] The post Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
Continue on GBHackers ↗ ‹ All news Get the newsletter
The summary and image come from GBHackers; the image is shown from their website.