A malicious artifact identified as anthropic.claude-code version 2.1.313 in the Open-VSX registry prepends a 66-line loader to the otherwise legitimate Claude Code extension bundle. It runs as soon as VS Code loads the extension, before the normal code, and does not require the user to start a Claude conversation. The loader quietly gathers basic host details and names of potentially sensitive environment variables, then adds an attacker-controlled SSH key labeled “svc-telemetry” to the user’s authorized keys. It also tries to enable the SSH service and opens a reverse SSH tunnel to 134.209.82.225, giving the operator a route to the victim machine.
The malware seeks persistence through a macOS LaunchAgent, Linux cron entry, or Windows scheduled task or Startup folder, and sends host information and public IP data to a beacon over HTTP port 8099. Its injected stage does not download additional malware; scripts and tunnel credentials are built into or generated from the extension. The analysis identifies indicators including the server address, key fingerprint, persistence paths, and file hashes, and recommends isolating affected systems, preserving evidence, rotating exposed credentials, and investigating possible follow-on access. The findings establish that the examined artifact is malicious, but do not establish how it was published or show that Anthropic’s official Marketplace release or distribution systems were compromised.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Hackers stole about $6.3 billion in cryptocurrency from Binance wallets across at least 10 blockchains, draining most of it in roughly 20 minutes. Investigators suspect North Korea’s TraderTraitor group; Binance and other firms have frozen about half the funds, while much of the rest may be unrecoverable. (wired.com)
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
A compromised Claude Code extension version 2.1.313 distributed malware that collected developer device details and attempted to install a persistent SSH backdoor. Anthropic replaced the extension with version 2.1.314, but affected devices may still need remediation. (doublepulsar.com)
A compromised Claude Code extension version 2.1.313 attempted to steal device information and install a persistent SSH backdoor on developer computers. Anthropic replaced the extension, but the update does not remove backdoors from devices already infected. (doublepulsar.com)
Researchers report five full cross-tenant compromises in Azure linked to a common underlying weakness. The cases highlight risks to tenant isolation in Microsoft’s cloud platform. (binarysecurity.no)
Binance’s hot wallet signed 50 EIP-7702 authorizations, then a contract drained about $2.5-$2.8 billion from it three minutes later. The timing raises questions about whether the wallet’s private key was compromised or misused. (808bits.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.