Anthropic has not informed customers, and silently deleted the backdoored version without telling anybody.
I wonder why ? ( we all know why )
The compromised version was 2.1.313. This version was replaced 8 hours ago by Anthropic, with version 2.1.314, which appears to remove the backdoor from the extension but I’m not sure if it still contains no malicious code.
It does not remove the SSH backdoor from systems already infected, nor the prior recon activity.
> Today we identified a security incident involving a specific extension package in the Cursor VS Code extension Marketplace: Anthropic.claude-code version 2.1.313. This malicious version of the extension was not developed by Anthropic. At most 5,000 users were affected, and we will reach out directly.
So why is this being framed as Anthropic being compromised?
I don’t think this is even worthy of discussion. The medium post is straight up lies. Flagged.
6 comments
[ 3.4 ms ] story [ 3.4 ms ] threadI wonder why ? ( we all know why )
The compromised version was 2.1.313. This version was replaced 8 hours ago by Anthropic, with version 2.1.314, which appears to remove the backdoor from the extension but I’m not sure if it still contains no malicious code.
It does not remove the SSH backdoor from systems already infected, nor the prior recon activity.
So is this the most plausible way that binance was hacked so far?
> Today we identified a security incident involving a specific extension package in the Cursor VS Code extension Marketplace: Anthropic.claude-code version 2.1.313. This malicious version of the extension was not developed by Anthropic. At most 5,000 users were affected, and we will reach out directly.
So why is this being framed as Anthropic being compromised?
I don’t think this is even worthy of discussion. The medium post is straight up lies. Flagged.