Anthropic’s Claude Extension Used in Supply Chain Attack Affects Thousands of Devices
Original headline: A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
A supply-chain attack delivered a malicious Claude extension that was installed on roughly 5,000 developer machines. A flaw in the extension’s code prevented the attacker from fully compromising all systems, limiting the breach to a subset of devices. The backdoor remained active for about 12 hours before being detected.
The incident shows that supply-chain threats can infiltrate developer tools and expose thousands of machines.
Research angleHow do supply-chain attacks on developer tool extensions affect developers’ security awareness? — Protection Motivation Theory
1 related report
This story could become your next paper
HJITM works with researchers from study design through surveys, analysis and submission to international journals in generative AI and technology management. Bring us your research question.
This item is an AI-generated summary of reporting by Wired. Please check the original article for accuracy. Copyright in the original article belongs to Wired.