Anthropic的Claude型号的官方扩展是后门并威胁着多达5000台开发商的机器，多个来源报道了星期五。 Anthropic至今尚未就此事件向客户发出警告。
被破坏的软件包是一个在Cursor的市场上可用的VS代码扩展，是AI辅助开发工具的制造者，称 Friday公司。 2.1.313的恶意版本随后影响到“最多5 000个用户”，可能是当他们下载或他们的系统自动取出并安装时。 Anthropic在上个版本于Cursor上可使用数小时后推出2.1.314版本，据独立研究者凯文·博蒙特所言。 Beaumont和CTO以及安保公司Phorian 称的共同创始人，2.1.313版本通过Anthropic在Cursor上的官方账户发行。 迄今为止，Cursor和Anthropic都没有解释攻击者是如何获得账户控制权的。
寻找云层证书
Phorian CTO和共同创始人Luke Roberts告诉Ars, “恶意版本2.1.313被贴入官方的Anthropic账户，实际上取代了2.1.312. 默认情况下在 Cursor 中自动更新扩展，但用户可以在设置中配置此功能。” 福瑞安还有更多细节
Anthropic尚未向客户发布事件公示。
Cursor 称恶意扩展试图使用添加的攻击者控制的SSH密钥来安装一个持久的SSH后门，实现了本地SSH服务，并打开了逆向SSH隧道。 该代码被写入了Windows,macOS，和Linux的工作。 由于Cursor扩展运行时有工具集成开发环境的许可，后门版本一旦被安装，有可能获得本地文件，源代码和开发者工具的获取。
本文由 AI宝库自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, multiple sources reported Friday. Anthropic so far has yet to warn customers of the incident.
The compromised package was a VS Code extension available in the marketplace of Cursor, a maker of AI-assisted developer tools, the company said Friday. The malicious version, 2.1.313, subsequently affected “at most 5,000 users,” presumably when they either downloaded it or their systems automatically fetched and installed it. Anthropic pushed version 2.1.314 several hours after the previous version became available on Cursor, according to independent researcher Kevin Beaumont. Both Beaumont and the CTO and co-founder of security firm Phorian said that version 2.1.313 was distributed through Anthropic’s official account on Cursor. So far, neither Cursor nor Anthropic has explained how the attackers gained control of the account.
In search of cloud credentials
“It was a supply-chain compromise where the attacker gained access to the official distribution channel,” Phorian CTO and co-founder Luke Roberts told Ars. “The malicious version 2.1.313 was posted to the official Anthropic account, effectively superseding 2.1.312. Extensions auto-update in Cursor by default, but users can configure this in settings.” Phorian has more details here.
Anthropic has yet to issue public notice of the incident to customers.
Cursor said that the malicious extension attempts to install a persistent SSH backdoor using an added attacker-controlled SSH key, enabling the local SSH service, and opening a reverse SSH tunnel. The code was written to work on Windows, macOS, and Linux. Because Cursor extensions run with the permissions of the tool’s Integrated Development Environment, the backdoored version likely would gain access to local files, source code, and developer tooling once it was installed.
Auto-fetched and translated by AI Gem Box. All rights belong to the original author.