Anthropic: That Claude Code extension compromise… couldn't be us
Anthropic disavows involvement in a supply chain attack that distributed a tampered Claude Code extension to thousands of developer devices. Security researchers and reporting state that malicious extensions delivered remote access trojans and persistent Secure Shell backdoors to developer machines worldwide. Cursor reports that up to five thousand of its users were affected by the tampered tool. The incident highlights rising software supply chain vulnerabilities targeting developer environments and AI tooling.
Listen to Live Briefing
Real-time synthesized voice briefing · Live Feeds Desk
- ✓ Anthropic stated that the Claude Code extension compromise was not on its end.
- ✓ A supply chain attack put malicious Claude extensions on thousands of devices.
- ✓ Cursor stated that up to 5,000 users were affected by the tampered Claude Code extension.
- ✓ The trojanized Claude Code extension delivered a persistent SSH backdoor to developer machines.
What changed
Anthropic officially stated that the Claude Code extension compromise did not originate from its organization.
Live updates
-
Anthropic Denies Responsibility for Compromised Claude Code Extension
Anthropic disavows involvement in a supply chain attack that distributed a tampered Claude Code extension to thousands of developer devices. Security researchers and reporting state that malicious extensions delivered remote access trojans and persistent Secure Shell backdoors to developer machines worldwide. Cursor reports that up to five thousand of its users were affected by the tampered tool. The incident highlights rising software supply chain vulnerabilities targeting developer environments and AI tooling.
Why it matters
The security breach affected developer systems globally, installing persistent backdoors through compromised coding extensions. While initial reports and security analyses linked the malicious activity to Claude tooling ecosystems, Anthropic maintains that the compromise did not originate from its systems.
What is confirmed
- Anthropic stated that the Claude Code extension compromise was not on its end.
- A supply chain attack put malicious Claude extensions on thousands of devices.
- Cursor stated that up to 5,000 users were affected by the tampered Claude Code extension.
- The trojanized Claude Code extension delivered a persistent SSH backdoor to developer machines.
Still unconfirmed
- Anthropic was hacked to deliver a remote access trojan to Claude developer laptops worldwide.
What to watch next
- Official technical attribution of the supply chain compromise vector
- Further disclosures from affected platforms regarding developer device security
confidence 90%Sources used for this update (23)
- www.anthropic.com — Newsroom \ Anthropic
- arstechnica.com — Ars Technica - Serving the Technologist since 1998. News, reviews, and ...
- thehackernews.com — The Hacker News | #1 Trusted Source for Cybersecurity News
- www.anthropic.com — Home \\ Anthropic
- claude.com — Claude
- anthropic.skilljar.com — Anthropic Courses
- academy.claude.com — Claude Academy · Learn to work and build with Claude
- en.wikipedia.org — Anthropic - Wikipedia
- www.bleepingcomputer.com — Retail giant Ahold Delhaize takes systems offline after cyberattack - BleepingComputer
- digg.com — Microsoft, Alphabet and 14 others object to OKXICE’s tokenized-stock plans · Digg
- thenextweb.com — Apple launches its first touchscreen MacBook Pro, from $2,899
- blakecrosley.com — Claude Code CLI: The Complete Guide — Hooks, MCP, Skills
Community Sentiment: How do you assess this situation?
Voice your perspective · Real-time aggregated sentiment from the Live Feeds community