{"author":{"username":"adrianandreev","displayName":"ΛDRIΛИ","fid":267836},"timestamp":"2026-10-30T10:39:48.000Z","text":"VS studio babe, wake up \nTime to uninstall and wipe your machine (hope no keys or wallets were stored on it)\n\nAllegedly TL;DR:\nPhorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up focuses primarily on macOS, where the extension attempts to configure an SSH backdoor and establish persistence.\n\nCredit/source:\n\nhttps://phorion.io/blog/offical-claude-code-vsx-compromise/\n\nhttps://cyberplace.social/@GossiTheDog/117528831681803563","links":[{"url":"https://phorion.io/blog/offical-claude-code-vsx-compromise","title":"Official Claude Code Extension Compromise: Security Advisory | Phorion"},{"url":"https://cyberplace.social/@GossiTheDog/117528831681803563","title":"Kevin Beaumont (@GossiTheDog@cyberplace.social)"}],"farcaster":"https://farcaster.xyz/adrianandreev/0x4d60f81f","firefly":"https://firefly.social/post/farcaster/0x4d60f81ff19a44b3b1455602c8faa9b53d4e373a"}