Poisoned Nx Console extension stole GitHub tokens in 18 minutes
TeamPCP claims about 3,800 internal repositories from one GitHub employee; GitHub says customer repositories were not affected.
1
Stories per day · 30 days
2 RSS
Relatedsupply-chain9claude-code7cursor7ssh-backdoor5open-vsx3anthropic2developer-tools2github2akamai1backdoor1claude-desktop1codex1credentials1embedded-browser1extension1fake-font1ghostaction1github-copilot1
19 stories, newest first · one card per story
Stories tagged #vscode
Malicious Claude Code extensions on Cursor planted an SSH backdoor
Cursor says versions 2.1.312 and 2.1.313 were available from about 2:27 AM to 1:35 PM PDT on October 29.
1
Tampered Claude Code extension on Cursor planted an SSH backdoor
Version 2.1.313 was downloadable for about 11 hours and could have reached up to 5,000 developers; official Anthropic channels were not affected.
1
Claude Code VS Code extension reportedly compromised on Open VSX
The oss-security note says the Microsoft Visual Studio Marketplace copy was allegedly not affected, but the post is incomplete.
Backdoors claimed in official Claude Code VS Code and Cursor extensions
The linked post body did not load, so only the title states the backdoor claim.
Backdoored Claude Code 2.1.313 shipped to VS Code and Cursor
The build tried to plant a persistent SSH reverse tunnel before Anthropic replaced it with 2.1.314.
4
Malicious Claude Code VS Code extension installed an SSH backdoor
Cursor says at most 5,000 users got version 2.1.313 on October 29; Anthropic replaced it with 2.1.314.
4
Trojanized Claude Code extension on Open VSX installs an SSH backdoor
Version 2.1.313 beacons to 134.209.82.225 and plants an Ed25519 key; Anthropic’s Microsoft Marketplace build is not implicated.
1
Embedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction hid credential-stealing Node.js malware in fake font files across 94 GitHub repositories.
5
Vibe Coding VS Code Extension Monitors All Developer Activity
Akamai reports a Vibe Coding VS Code extension that monitors all developer activity.
AI agents in a stand-up call
Open-source Agent Standup turns Claude Code sessions into a live multi-agent stand-up at zero token cost.
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
A ThreatsDay roundup covers GlassWorm VS Code themes, VulcanRAT207, a Qilin extradition, and a rogue Gentlemen affiliate.
GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware
GlassWorm-linked VS Code theme extensions hide downloaders that fetch Windows malware, including a blockchain-addressed in-memory loader.
GlassWorm Supply Chain Attack Hides Malware Inside VS Code Color Themes
GlassWorm-linked malicious VS Code color themes on Visual Studio Marketplace and Open VSX shipped staged JavaScript loaders that pulled C2 addresses from Solana memos.
8
Claude Code's new Mods system lets developers rewrite the AI coding tool from the inside
Anthropic launched Mods, unsandboxed plugins that let developers change Claude Code's tools, commands, and interface.
OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
An OpenAI Codex user says one task spawned 826 agents and burned about $79,000 without authorization.
VSCode's SSH Agent Is Bananas
Thomas Ptacek details how VSCode Remote SSH installs a persistent WebSocket agent with filesystem, file-editing, and shell access, resembling remote-access tooling.
One Click in a Malicious VS Code Project Can Give Attackers Persistent Access to Your PC
Remedio researchers show crafted command: links in VS Code source editors can bypass Workspace Trust to install malicious extensions for persistent access.
3