Mmastodon TechnologyTechnology first seen 12 d ago, last 12 d ago, peak #1

Supply chain attack hits thousands of devices via Claude extensions

Original: A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices Thanks to a lucky break, flawed

A supply chain attack pushed malicious extensions for Anthropic's Claude onto thousands of developer machines. Reports say flawed code in the tainted extension stopped the attacker from fully compromising some 5,000 devices, limiting the damage to what observers describe as a lucky break rather than a designed safeguard. The incident is drawing attention to how easily compromised developer tools and extensions can spread malware at scale, and to the security risks around the fast-growing ecosystem of AI coding assistants.

Why now: News of a supply chain compromise affecting a widely used AI tool raises fresh concerns about extension marketplace security.

AnthropicClaude

Open on mastodon →

Rank over time, top of the chart is #1. 5 snapshots from 12 d ago to 12 d ago.

Evidence

• A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines. https://www.… · techwire@gamefan.net · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/4385624