Check your Claude Code extension version. A malicious build on Open VSX plants… · @qwerty__cs · TwKit

@qwerty__cs

Check your Claude Code extension version. A malicious build on Open VSX plants an SSH backdoor. OpenSourceMalware reported a trojanized copy of anthropic.claude-code 2.1.313 today. You don’t even need to send Claude a message. The malicious code runs as soon as the extension loads, adding an attacker’s SSH key, opening a reverse tunnel, and setting up persistence. The extension keeps working normally. Installed or updated to that build? Check your machine. Uninstalling the extension alone won’t remove the SSH key or persistence. https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor

曝光 89 · 评论 1 · 点赞 0 · 书签 0