{"slug": "trojanized-claude-code-extension-on-open-vsx-planted-a-persistent-ssh-backdoor", "title": "Trojanized Claude Code extension on Open VSX planted a persistent SSH backdoor", "summary": "OpenSourceMalware's analysis of a trojanized 'anthropic.claude-code' extension version 2.1.313 on the Open VSX registry found a prepended loader that added an SSH key, opened a reverse tunnel and set persistence, security researcher Adnan Khan (@adnanthekhan) said on October 30th. The report does not prove Anthropic's official Marketplace release was compromised, but it shows how registry distribution can turn IDE extension trust into persistent SSH access to code, terminals and credentials.", "body_md": "# Trojanized Claude Code extension on Open VSX planted a persistent SSH backdoor\n\n**OpenSourceMalware analyzed version 2.1.313 on Open VSX and says its prepended loader added an SSH key, opened a reverse tunnel and set persistence.**\n\n        By [Ryan Merket](https://runtimewire.com/author/ryan-merket)\n        · Published \n\nPrimary source: [x.com](https://x.com/adnanthekhan/status/2116010483702706337)\n\n## Why it matters\n\nDeveloper extensions run inside trusted IDEs with access to code, terminals and credentials. A trojanized artifact using the Claude Code package identity shows how registry distribution can turn that trust into persistent SSH access, even though the report does not prove Anthropic's official Marketplace release was compromised.\n\nSecurity researcher [Adnan Khan (@adnanthekhan)](https://x.com/adnanthekhan) said on October 30th that a Claude Code VS Code extension had been backdoored, linking to an [OpenSourceMalware analysis](https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor) of a malicious artifact identified as 'anthropic.claude-code' version 2.1.313.…\n\nWhen you purchase through links in our articles, [we may earn a small commission](https://runtimewire.com/affiliate-monetization-standards). This doesn’t affect our editorial independence.", "url": "https://wpnews.pro/news/trojanized-claude-code-extension-on-open-vsx-planted-a-persistent-ssh-backdoor", "canonical_source": "https://runtimewire.com/article/trojanized-claude-code-extension-open-vsx-ssh-backdoor", "published_at": "2026-10-30 05:04:05+00:00", "updated_at": "2026-10-30 08:18:48.196533+00:00", "lang": "en", "topics": ["ai-tools", "developer-tools", "ai-safety"], "entities": ["OpenSourceMalware", "Open VSX", "Claude Code", "Anthropic", "Adnan Khan", "Visual Studio Code"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/trojanized-claude-code-extension-on-open-vsx-planted-a-persistent-ssh-backdoor", "markdown": "https://wpnews.pro/news/trojanized-claude-code-extension-on-open-vsx-planted-a-persistent-ssh-backdoor.md", "text": "https://wpnews.pro/news/trojanized-claude-code-extension-on-open-vsx-planted-a-persistent-ssh-backdoor.txt", "jsonld": "https://wpnews.pro/news/trojanized-claude-code-extension-on-open-vsx-planted-a-persistent-ssh-backdoor.jsonld"}}