PulseAugur
中
实时 15:04:31
English(EN) 5,000 Developers Auto-Updated Claude Code Last Thursday. The Update Was Carrying a Backdoor — and It Was Signed by the Right…

恶意Anthropic Claude代码扩展更新毒害了5,000名用户

作者 PulseAugur 编辑部 · [1 个来源] ·

一名恶意行为者侵入了Cursor VS Code扩展市场，分发了一个被篡改的Anthropic Claude代码扩展版本。这个被篡改的扩展（版本2.1.312和2.1.313）使用了Anthropic的合法身份签名，导致约5,000名用户自动更新。恶意代码窃取了敏感用户数据，包括环境变量和SSH密钥，并试图建立一个到攻击者控制服务器的持久性反向SSH隧道。尽管恶意代码中的错误阻止了大多数系统被完全攻陷，但对某些用户而言，持久化脚本和数据窃取是成功的。Cursor此后已移除恶意版本，为安全起见已将市场下线，并发布了一个干净的版本（2.1.314）。 AI

影响 凸显了AI工具供应链攻击的风险，以及超越加密签名的强大验证机制的必要性。

排序理由 涉及第三方分发AI相关工具的安全事件。

在 dev.to — Claude Code tag 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →

恶意Anthropic Claude代码扩展更新毒害了5,000名用户

本文如何被排名

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
涉及第三方分发AI相关工具的安全事件。
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
1 days old
Coverage has settled into its steady-state source set.

完整方法见我们的编辑标准。

报道来源 [1]

  1. dev.to — Claude Code tag TIER_1 English(EN) · Faith & Fact - Marky Mark ·

    5,000 Developers Auto-Updated Claude Code Last Thursday. The Update Was Carrying a Backdoor — and It Was Signed by the Right…

    <h2> The label said Anthropic. The dish was poisoned. </h2> <p>On Thursday, October 29, between roughly 2:27 a.m. and 1:35 p.m. Pacific, the Cursor VS Code Extension Marketplace served up a copy of Anthropic's Claude Code extension that Anthropic never cooked. Versions 2.1.312 an…

相关实体

相关话题