Peaked at #1 Now #1
Claude VSCode extension poisoned with backdoor
Official Claude Code VS Code extension was compromised, briefly installing an SSH backdoor when pulled.
Key points
- @mattjay said the official Claude code VS Code extension was compromised and pulling it would have installed an ssh backdoor for a brief window today.
- A reply said the author of the blog has been spoken with and the official Claude Code VS Code extension was not believed to be compromised, calling it instead a report of this incident.
- Replies asked whether the publisher account was hijacked or something got poisoned upstream, and how long the window was before it got pulled.
Key points and the reaction summary are written by AI from the posts on this page. Check the original post. How we use AI
Original post
Top replies on X
Reaction on X: Replies largely questioned and pushed back: one said the extension was not believed to be compromised and characterized the post as a report of the incident, while others asked whether the publisher account was hijacked or something was poisoned upstream, and how long the window lasted. One reply joked about checking ~/.ssh/authorized_keys, and another questioned whether this was a different extension. The original poster did not respond.
Sign in to see 5 top replies from X
From @mntruell, @evvvvince, @dng_notes and others. Spam removed, with English and Chinese translations.
Discussion 0
Sign up Sign in to join the discussion
No comments yet. Start the conversation.