solidot新版网站常见问题，请点击这里查看。
消息
本文已被查看 222 次
Claude Code for VS Code 官方扩展被植入后门
安全研究人员在 Cursor Marketplace 的 Claude Code for VS Code 官方扩展中发现了后门，该恶意版本已经撤下，攻击者也关闭了其服务器。Cursor 已发布安全公告，但 Claude Code 开发商 Anthropic 尚未做出任何声明。受影响的版本是 Anthropic.claude-code 2.1.313，共上线了大约 11 小时，受影响用户估计有 5,000 名，该扩展会试图植入一个持久 SSH 后门。恶意扩展会：收集主机和用户信息：主机名、用户名、操作系统、架构、主目录路径、环境变量名称、工作目录、已配置的 Git 邮箱以及公网 IP。尝试将攻击者控制的 SSH 键添加到 authorized_keys，启用本地 SSH 服务，并建立反向 SSH 隧道。由于恶意代码存在 bug，除非 Cursor 是以管理员权限启动的 (这种情况极为罕见) ，否则这一步会失败。尝试通过 LaunchAgent (macOS) 或计划任务 (Windows，该任务会尝试以 SYSTEM 身份运行，并以启动脚本作为回退) 使反向 SSH 隧道长期生效。后台脚本大约每 60 秒重试一次建立隧道。通过 HTTP POST 将主机详情和后门状态上报至 8099 端口上的 /beacon。如果用户是在 2026 年 10 月 29 日太平洋时间凌晨 2:27 至下午 1:35 之间，从 Cursor VS Code 扩展市场安装了 Anthropic.claude-code 2.1.313 或更新到该版本，那么需要检查下系统。
https://phorion.io/blog/offical-claude-code-vsx-compromise/
https://cursor.com/cn/blog/claude-code-extension-security-notice
本文由 AI宝库自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
Click here to see the most common problems on the new version of the website.
Message
This article has been viewed 222 times
Claude Code for VS Code official extension implanted in the back door.
Security researchers discovered the back door in the official extension of Claude Code for VS Code in Cursor Marketplace, the malicious version of which was withdrawn and the attackers shut down their servers. Cursor has publish security announcement, but Claude Code developer Anthropic has not made any statement. The affected version is Anthropic.claude-code 2.1.13, which has been online for approximately 11 hours, with an estimated 5,000 affected users, and the extension attempts to implant a permanent SSH back door. Malicious Extension: Collection of host and user information: host name, user name, operating system, architecture, home directory path, environment variable name, working directory, configured Git mailbox and public network IP. Try to add an attacker-controlled SSH key to an authorized keys, enable local SSH services and create a reverse SSH tunnel. Because the malicious code exists, this step will fail unless Cursor is initiated by administrator permission (which is extremely rare). Try to make the reverse SSH tunnel work in the long term through LaunchAgent (macOS) or a planned mission (Windows), which will try to run as SYSTEM and start with a script as rollback. Backstage scripts set up tunnels approximately every 60 seconds retry. Report host details and back door status to /beacon on the 8099 port through HTTP POST. If the user installed anthropic.claude-code 2.1.13 from Cursor VS Code, or updated to that version, between 2:27 a.m. Pacific Time and 1:35 a.m. on October 29th, 2026, then the system needs to be checked.
https://phorion.io/blog/offical-claude-code-vsx-compromise/
https://cursor.com/cn/blog/claude-code-extension-security-notice
Auto-fetched and translated by AI Gem Box. All rights belong to the original author.