38
Anthropic hacked to deliver remote access trojan to Claude developer laptops worldwide
(doublepulsar.com)
this post was submitted on 30 Oct 2026
38 points (95.2% liked)
Technology
2871 readers
259 users here now
Tech related news and discussion. Link to anything, it doesn't need to be a news article.
Let's keep the politics and business side of things to a minimum.
Rules
No memes
founded 1 year ago
MODERATORS
why didn't claude catch and prevent this?
Claude hacked itself.
Probably.
LLMs are a hacker’s wet dream.
Phorion’s write up is helpful (Linked in TFA). Why it uploads a list of sensitive environment variables instead of the actual values… lol. I guess that’s a silver lining.
Discussion on HN says it was actually an extension for Cursor VSCode? So much as I find satisfaction in Anthropic crashing and burning, I'm not sure this is it.
Cursor is a VS Code fork which uses Open VSX extension marketplace rather than Microsoft one. Other forks like VS Codium also use Open VSX.
Given how fast AI companies are to claim credit for hacks they didn’t really contribute to (like recent PHP2Shell) I don’t mind the same being done to them. If media can call DDoSed website “hacked” then we can definitely say Anthropic was hacked.
We were supposed to hang in there 18 months but couldn’t hang in there a week.
Didn’t need a weekend anyway.
Fuck.