Anthropic’s Claude Extension Hijacked in Supply‑Chain Attack on Thousands of Devices
Original headline: A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
Malicious code was inserted into an extension for Anthropic’s Claude model and distributed via the supply chain to roughly 5,000 developer machines. The attacker back‑doored the extension and operated it for about 12 hours, but a flaw in the code prevented a full worm‑like propagation.
Supply‑chain compromise of AI extensions shows how a single malicious plugin can jeopardize entire development ecosystems.
Research angleHow do AI extension supply‑chain attacks affect organizations’ security awareness and protective behaviors? — Protection Motivation Theory
2 related reports
Turn this security issue into a research project
HJITM works with researchers from study design through surveys, analysis and submission to international journals in generative AI and technology management. Bring us your research question.
This item is an AI-generated summary of reporting by WIRED. Please check the original article for accuracy. Copyright in the original article belongs to WIRED.