gcdRadar

ssh

1 live · 2 on record · last incident 15 days ago

Dec ’25records per month, by first reportNov ’26

Live1

  1. live
    Claude Code extension Claude Code extension poisoned with persistent SSH backdoor

    Supply chain · Exploited · No patch yet · since 30 Oct 2026 · updated 2 Nov 2026

    A tampered build of Anthropic’s Claude Code extension planted an SSH backdoor on developers’ machines via the Open VSX marketplace. Researchers discovered the malicious version 2.1.313 distributing unauthorized access.

    Do:Remove the malicious Claude Code extension version and check systems for unauthorized SSH keys.

    AI

Earlier1

  1. closed