PulseAugur
EN
LIVE 12:21:40

Malicious Anthropic Claude Code extension infected 5,000 users

By PulseAugur Editorial · [1 sources] ·

A malicious version of the Anthropic Claude Code extension (v2.1.313) was distributed through the Cursor Marketplace and Open VSX platforms, affecting up to 5,000 users. The compromised extension injected a malicious loader, added an unauthorized SSH key for remote access, and collected system information. While remote access was often blocked on Windows and macOS due to privilege limitations, the access key and persistence mechanisms were successfully installed. Anthropic has since released a secure version (2.1.314), and affected users are advised to isolate their systems, remove suspicious keys, and change credentials. AI

IMPACT Compromised AI tools can erode user trust and highlight the need for robust security vetting in AI-powered development environments.

RANK_REASON This is a security incident involving a third-party tool that integrates with an AI model, rather than a core AI release or research.

Read on dev.to — Claude Code tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Malicious Anthropic Claude Code extension infected 5,000 users

How we ranked this

Signal score
26 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
This is a security incident involving a third-party tool that integrates with an AI model, rather than a core AI release or research.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — Claude Code tag TIER_1 English(EN) · Hacks.gr ·

    Developer app hacked and secretly installed dangerous software

    <p>An analysis of the compromised official Anthropic Claude Code extension (v2.1.313) distributed via Open VSX and Cursor Marketplace, which injected a malicious loader, added an unauthorized SSH key, and established reverse tunneling.</p> <p>The issue concerns a malicious versio…

RELATED ENTITIES

RELATED TOPICS