{"id":184040,"date":"2026-10-30T11:41:56","date_gmt":"2026-10-30T09:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/atakuyushhie-smogli-vnedrit-vredonosnyj-kod-v-oficzialnoe-dopolnenie-claude-code-k-vs-code"},"modified":"2026-10-30T11:41:59","modified_gmt":"2026-10-30T09:41:59","slug":"attackers-injected-malicious-code-into-the-official-claude-code-extension-for-vs-code","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/attackers-injected-malicious-code-into-the-official-claude-code-extension-for-vs-code","title":{"rendered":"Attackers were able to inject malicious code into the official Claude Code extension for VS Code","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A compromise has been detected in the official Claude Code extension for VS Code, provided by Anthropic and downloaded 63 million times. Attackers managed to place the release anthropic.claude-code@2.1.313, containing malicious code for remote access to the user's system, in the Open-VSX directory. The publication of the malicious version of the package in the Microsoft repository has not been confirmed, but a report has been generated with a warning. The problematic version has been removed from the Open-VSX repository, and a corrective release 2.1.314 has been published.<\/p>\n
The code to load malicious components was added at the beginning of the extension.js file and was activated during the initialization of the extension after launching VS Code (user interaction with Claude was not required to activate the malicious code). The malicious activity involved creating the directory ~\/.ssh and adding an ssh-ed25519 public key to the ~\/.ssh\/authorized_keys file with the note 'svc-telemetry'. After that, a check was made for the presence of the sshd background process in Linux and macOS, and the SSH server was activated if it was absent. In Windows, OpenSSH was installed via PowerShell. <\/p>\n