vscode

Live1

1. live
   Claude Code extension Claude Code extension poisoned with persistent SSH backdoor

   Supply chain · Exploited · ○No patch yet · since 30 Oct 2026 · updated 2 Nov 2026

   A tampered build of Anthropic’s Claude Code extension planted an SSH backdoor on developers’ machines via the Open VSX marketplace. Researchers discovered the malicious version 2.1.313 distributing unauthorized access.

   Do:Remove the malicious Claude Code extension version and check systems for unauthorized SSH keys.

   AI

Earlier0

Nothing closed yet.