Anthropic的Claude型号的官方扩展是后门，威胁着多达5000台开发商的机器，多个来源报道了星期五。 Anthropic至今尚未对该事件发出警告。
失密的软件包是在Cursor市场中可用的VS代码扩展，是AI辅助开发工具的制造者，称 Friday公司。 恶意版本2.1.313随后影响了“最多5 000个用户”，可能是当他们下载或他们的系统自动获取并安装时。 Anthropic在上一个版本于Cursor上可用数小时后，便推出了2.1.314版本，据独立研究者凯文·博蒙特(Kevin Beaumont)称。 Beaumont和CTO以及安保公司Phorian 称的共同创始人，即2.1.313版本通过Anthropic在Cursor的官方账户分发。 迄今为止，Cursor和Anthropic都没有解释攻击者是如何获得账户控制权的。
寻找云端证书
Phorian CTO和共同创始人Luke Roberts告诉Ars, “恶意版本2.1.313被贴在官方的Anthropic账户上，实际上取代了2.1.312. 默认情况下在 Cursor 中自动更新扩展，但用户可以在设置中配置此功能。” 福瑞安还有更多细节
Anthropic尚未向客户发布事件公告。
Cursor 称恶意扩展试图使用添加的攻击者控制的SSH密钥安装一个持久的SSH后门，使当地SSH服务成为可能，并打开了逆向SSH隧道。 该代码被写成在Windows,macOS和Linux上工作。 因为Cursor扩展会随该工具的集成开发环境的许可而运行，所以后门版本一旦安装就有可能获得本地文件，源代码和开发者工具的使用权。
本文由 AI图鉴自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, multiple sources reported Friday. Anthropic so far has yet to warn customers of the incident.
The compromised package was a VS Code extension available in the marketplace of Cursor, a maker of AI-assisted developer tools, the company said Friday. The malicious version, 2.1.313, subsequently affected “at most 5,000 users,” presumably when they either downloaded it or their systems automatically fetched and installed it. Anthropic pushed version 2.1.314 several hours after the previous version became available on Cursor, according to independent researcher Kevin Beaumont. Both Beaumont and the CTO and co-founder of security firm Phorian said that version 2.1.313 was distributed through Anthropic’s official account on Cursor. So far, neither Cursor nor Anthropic has explained how the attackers gained control of the account.
In search of cloud credentials
“It was a supply-chain compromise where the attacker gained access to the official distribution channel,” Phorian CTO and co-founder Luke Roberts told Ars. “The malicious version 2.1.313 was posted to the official Anthropic account, effectively superseding 2.1.312. Extensions auto-update in Cursor by default, but users can configure this in settings.” Phorian has more details here.
Anthropic has yet to issue public notice of the incident to customers.
Cursor said that the malicious extension attempts to install a persistent SSH backdoor using an added attacker-controlled SSH key, enabling the local SSH service, and opening a reverse SSH tunnel. The code was written to work on Windows, macOS, and Linux. Because Cursor extensions run with the permissions of the tool’s Integrated Development Environment, the backdoored version likely would gain access to local files, source code, and developer tooling once it was installed.
Auto-fetched and translated by AI Atlas. All rights belong to the original author.