Today for AI
HOT RADAR
toolsHEAT 18.5°

AI CURATED HOT STORY · 10/30/2026

Anthropic Breach: Claude Extension Delivered RAT to Developers

2 reports archived1 independent sourcesupdated 10/30/2026, 18:47:06
Synthesis & Latest Updates
1 Sources Cross-Validated

Anthropic suffered a supply chain attack where its VS Code and Cursor extension (v2.1.313) delivered a Remote Access Trojan via an SSH reverse backdoor. The malicious version auto-updated to over 40 million installations; Anthropic silently replaced it with v2.1.314 without public disclosure, leaving infected systems compromised.

LATEST/Anthropic suffered a supply chain attack where its VS Code and Cursor extension (v2.1.313) delivered a Remote Access Trojan via an SSH reverse backdoor. The malicious version auto-updated to over 40 million installations; Anthropic silently replaced it with v2.1.314 without public disclosure, leaving infected systems compromised.

Hourly heat curve

3 fully observed hours
Now
18.5
Peak
19.219:00
24h change
–

The line compares only sources observed throughout; gap hours are interpolated to keep the trend continuous.

Coverage timeline

Total 2 reports · Latest first
  1. Hacker News AIT2·85 pts

    Anthropic Breach: Claude Extension Delivered RAT to Developers

    • Official Claude extensions in VS Code/Cursor were compromised with an SSH reverse backdoor enabling remote control of developer hosts
    • Malicious version 2.1.313 spread to over 40 million installations via automatic updates
    • Anthropic silently released patched version 2.1.314 without user notification, failing to remove persistent backdoors from infected systems