A trojanized version of the Claude Code extension, identified as anthropic.claude-code version 2.1.313, contains a malicious loader that enables persistent SSH access to developer systems. Researchers analyzed an artifact obtained from Open VSX and discovered 66 lines of JavaScript added to the legitimate extension bundle. This additional code... Weiterlesen: Malicious Claude Code VS Code Extension Installs Persistent SSH Backd…
Intelligence View
⚡ tsecurity.de Intelligence
Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access
A trojanized version of the Claude Code extension, identified as anthropic.claude-code version 2.1.313, contains a malicious loader that enables persistent SSH…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Powered by tsecurity.de
tsecurity.de Hub
İlgili Story Cluster & Kaynaklar (vector AI)
8 Kaynaklar
We’re Scouring Amazon for Early Black Friday Deals. Shop Top Discounts on Apple, Sony and More Before the Rush
7 diğer kaynaklar
CCNETvor 2 Std.Save Up to $840 on a Lectric E-Bike With These Deals Ahead of Black Friday CCNETvor 1 Std.These Early Black Friday Laptop Deals Can Already Save You Hundreds on MacBooks and More ZZDNETvor 3 Std.Sony’s premium WH-1000XM6 headphones are back down to their lowest price ever ahead of Black Friday ZZDNETvor 3 Std.Sony’s premium WH-1000XM6 headphones are back down to their lowest price ever ahead of Black Friday ZZDNETvor 3 Std.Sony’s premium WH-1000XM6 headphones are back down to their lowest price ever ahead of Black Friday ZZDNETvor 3 Std.Sony’s premium WH-1000XM6 headphones are back down to their lowest price ever ahead of Black Friday
+1
8 Kaynaklar
CVE-2026-53613 | Linux util-linux mount toctou (Nessus ID 374940)
7 diğer kaynaklar
VVulDB Updatesvor 5 Std.CVE-2026-53612 | Linux util-linux Mount mount toctou (Nessus ID 374940) VVulDB Updatesvor 5 Std.CVE-2026-53614 | Linux util-linux mount privileges management (Nessus ID 374940) VVulDB Updatesvor 4 Std.CVE-2026-99239 | Linux Kernel up to 7.3.0 L2CAP __l2cap_chan_add toctou (EUVD-2026-115281) VVulDB Updatesvor 3 Std.CVE-2026-72083 | Linux Kernel up to 7.2-rc3 SCSI Target Core core_scsi3_emulate_pro_register_and_move use after free (Nessus ID 374938) VVulDB Updatesvor 3 Std.CVE-2026-74283 | Linux Kernel up to 7.1.4 tipc netlink_net_capable permission (Nessus ID 374938) VVulDB Updatesvor 3 Std.CVE-2026-93787 | Linux Kernel up to 6.12.110/6.18.52 smb cifs_filldir out-of-bounds (Nessus ID 374938)
+1
8 Kaynaklar
CVE-2026-99241 | Linux Kernel up to 7.2.13 NTFS ntfs_filemap_page_mkwrite race condition (EUVD-2026-115283)
7 diğer kaynaklar
VVulDB Updatesvor 4 Std.CVE-2026-99240 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Damon Core mm/damon/core.c damos_commit_quota_goal target_value divide by zero (EUVD-2026-115282) VVulDB Updatesvor 4 Std.CVE-2026-99237 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 tracing update_last_data_if_empty race condition (EUVD-2026-115279) VVulDB Updatesvor 4 Std.CVE-2026-99238 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Tracing trace_module_record locking (EUVD-2026-115280) VVulDB Updatesvor 4 Std.CVE-2026-99235 | Linux Kernel up to 7.3.0 Tracing event_hist_trigger_free use after free (EUVD-2026-115277) VVulDB Updatesvor 4 Std.CVE-2026-99236 | Linux Kernel up to 7.3.0 tracing predicate_parse out-of-bounds (EUVD-2026-115278) VVulDB Updatesvor 4 Std.CVE-2026-99233 | Linux Kernel up to 7.3.0 Histograms event_hist_trigger_parse/hist_unreg_all event_call/ref use after free (EUVD-2026-115275)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/tr/4308486/it-guevenlik-haberleri/malicious-claude-code-vs-code-extension-installs-persistent-ssh-backdoor-to-give-attackers-remote-access/