How a Tampered Claude Code Extension Can Give Attackers Persistent SSH Access
A recent analysis by OpenSourceMalware found a tampered Claude Code extension on Open VSX that can give attackers persistent remote access to developer systems. The altered package, identified as anthropic.claude-code version 2.1.313, injects a short JavaScript loader that runs during normal extension activity and implements an SSH backdoor, reverse tunneling, and cross-platform persistence mechanisms. The sample analyzed targeted macOS on Apple Silicon, though the injected code contains branches for Linux…