@adrianandreev.eth
VS studio babe, wake up
Time to uninstall and wipe your machine (hope no keys or wallets were stored on it)
Allegedly TL;DR:
Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up focuses primarily on macOS, where the extension attempts to configure an SSH backdoor and establish persistence.
Credit/source:
https://phorion.io/blog/offical-claude-code-vsx-compromise/
https://cyberplace.social/@GossiTheDog/117528831681803563