A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by planting an SSH key, opening a reverse tunnel, and installing startup scripts. OpenSourceMalware identified the tampered package as anthropic.claude-code version 2.1.313 in research published on October 30. The analyzed sample targeted macOS on Apple Silicon. However, […]
This article has been indexed from Cyber Security News
Read the original article:
Weaponized Claude Code Extension Gives Hackers Persistent Remote Access to Developer Systems