Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on Open VSX that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up focuses …
AIHUB
Phorion Reports Backdoor in Official Claude Code VS Code Extension on Open VSX
Security firm Phorion says it detected a backdoor in the official Claude Code extension bundle for VS Code distributed through Open VSX. According to the advisory, the implant establishes a persistent SSH backdoor on macOS, Linux and Windows. Phorion has published a write-up on the finding; the supplied material does not name affected version ranges or include any vendor response.
Developers who installed the Claude Code VS Code extension need to know a security vendor claims its Open VSX distribution was compromised with a cross-platform persistent SSH backdoor.
Comments & Questions (0)
No comments yet
Be the first to comment!