Cursor foydalanuvchilari Anthropic’ning Claude Code kengaytmasining zararli versiyalari bilan yangi ta'minot zanjiri hujumi nishoniga olindi.
Hodisa 29-oktabrda sodir bo'ldi va anthropic.claude-code kengaytmasining 2.1.312 va 2.1.313 versiyalarini o'z ichiga oldi, ular Cursor VS Code Extension Marketplace'da taxminan 11 soat davomida faol bo'ldi.
Ham macOS, ham Windows foydalanuvchilariga qaratilgan kengaytma modullar yuklanganda teskari SSH tunnelini o'rnatish uchun mo'ljallangan JavaScript kodini o'z ichiga oldi.
Xavfsizlik tadqiqotchisi Kevin Beaumont ta'kidlashicha, taxminan 5 000 ishlab chiquvchi tizimi zararli versiyalarni yuklab olgan bo'lishi mumkin.
O'zgartirilgan kengaytma versiyalari Anthropic tomonidan ishlab chiqilmagan va Microsoft Visual Studio Marketplace, Open VSX yoki NPM registriga ham yuklanmagan.
"Zararli shaxs Cursor bozoriga kirish huquqidan foydalanib, biz yaratmagan va nashr etmagan Claude Code kengaytmasining o'zgartirilgan nusxasini joylashtirdi. Bizning rasmiy kanallarimizdagi versiyalar ta'sirlanmagan va bu faqat Cursor foydalanuvchilariga ta'sir qiladi," — dedi Anthropic'dan Felix Rieseberg.
Chalkashlikni oldini olish uchun Anthropic o'zining haqiqiy Claude Code kengaytmasini to'g'ridan-to'g'ri 2.1.314 versiyasiga yangiladi.
Cursor zararli Claude Code kengaytmasini aniqlaganidan so'ng darhol do'kondan olib tashladi va hodisani tekshirish uchun bozorni to'xtatdi. Cursor boshqa zararli kengaytmalarni topmadi, barcha kalitlarni aylantirdi va bozorni qayta qurib, qayta ochdi.
Bundan tashqari, u hujumchining serverini joylashtirgan bulut provayderi bilan ishladi va uni o'chirdi.
"Bizda kengaytmaning boshqa versiyalari yoki rasmiy tarqatish ta'sirlanganligi haqida hech qanday dalil yo'q," — dedi Cursor.
O'zgartirilgan kengaytma versiyalari modul yuklanishi paytida bajariladigan JavaScript funksiyasini o'z ichiga oldi, u xost ma'lumotlarini yig'ish, fayllarni o'zgartirish va OS buyruqlarini bajarish uchun mo'ljallangan edi.
"Yuklovchi avval xost razvedkasini yig'adi. Keyin u SSH kalitini o'rnatishga, SSHni yoqishga, teskari tunnel yaratishga va doimiylikni sozlashga harakat qiladi. Kechiktirilgan qayta chaqiruv keyinchalik xost tafsilotlarini yuborishga harakat qiladi," — deb ta'kidlaydi Microsoft.
Kod hostname, foydalanuvchi nomi, OS, tizim arxitekturasi, ishchi katalog va global Git elektron pochtasi kabi ma'lumotlarni yig'ish, shuningdek, platformaga xos skriptlar va doimiylik uchun ishga tushirish konfiguratsiyalarini joylashtirish kuzatildi.
Cursor ma'lumotiga ko'ra, mahalliy SSH xizmatini yoqish admin huquqlarini talab qilgani va kengaytma ko'pchilik macOS va Windows tizimlarida ularga ega bo'lmagani sababli, bu qadam muvaffaqiyatsiz tugadi va hujumchilarning tunnel orqali tizimga kirishiga to'sqinlik qildi.
Foydalanuvchilar zararli kengaytma versiyalarini iloji boricha tezroq olib tashlashlari kerak. Cursor foydalanuvchilarga infektsiyalarni aniqlashda yordam beradigan skriptni, shuningdek, muhitlar bo'ylab potentsial buzilishlarni aniqlash uchun buzilish ko'rsatkichlarini (IoC) e'lon qildi.
"Yuklanish yoki orqa eshik o'rnatilishi dalillarini ko'rsatgan xostlarni ajratib qo'ying. Ruxsatsiz SSH kalitini, doimiylik mexanizmlarini va ishlayotgan tunnel jarayonlarini olib tashlang va xostni qayta qurish kerakligini baholang. Kengaytmani o'chirish yetarli bo'lmasligi mumkin — yuklanish mustaqil doimiylik skriptlarini tushiradi, ular ishlashda davom etadi," — deb ta'kidlaydi Cursor.
Bog'liq: LiteLLM yangi ta'minot zanjiri hujumida buzildi
Bog'liq: Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Biz baribir unga tayanamiz.
Bog'liq: AOMEI Backupper qisqa muddatli ta'minot zanjiri kampaniyasida buzildi
Bog'liq: Rank Math PRO WordPress plagin ta'minot zanjiri hujumida buzildi
Cursor users have been targeted with malicious versions of Anthropic’s Claude Code extension in a new supply chain attack.
The incident occurred on October 29 and involved versions 2.1.312 and 2.1.313 of the anthropic.claude-code extension, which were live in the Cursor VS Code Extension Marketplace for roughly 11 hours.
Aiming at both macOS and Windows users, the extension contained JavaScript code designed to run when modules were loaded to establish a reverse SSH tunnel.
Roughly 5,000 developer systems might have downloaded the malicious versions, security researcher Kevin Beaumont notes.
The modified extension versions were not developed by Anthropic, and neither was pushed to the Microsoft Visual Studio Marketplace, Open VSX, or the NPM registry.
“A malicious actor used access to Cursor’s marketplace to publish a tampered copy of the Claude Code extension, which we didn’t build or publish. The versions on our official channels are not affected, and this only impacts Cursor users,” Anthropic’s Felix Rieseberg said.
To avoid confusion, Anthropic updated its legitimate Claude Code extension directly to version 2.1.314.
Cursor removed the modified Claude Code extension from the store immediately after identifying it and suspended the marketplace to investigate the incident. Cursor found no other malicious extensions, rotated all keys, and rebuilt and reopened the marketplace.
Additionally, it worked with the cloud provider hosting the attacker’s server to take it offline.
“We have no evidence that other versions of the extension or the official distribution are affected,” Cursor said.
The modified extension versions contained a JavaScript function that was executed during module loading to collect host information, modify files, and run OS commands.
“The loader first collects host reconnaissance. It then attempts to install an SSH key, enable SSH, create a reverse tunnel, and configure persistence. A delayed callback subsequently attempts to send host details,” Microsoft notes.
The code was observed collecting information such as hostname, username, OS, system architecture, working directory, and global Git email, as well as deploying platform-specific scripts and startup configurations for persistence.
According to Cursor, because enabling the local SSH service requires admin rights and the extension does not have them on most macOS and Windows systems, the step failed, preventing the attackers from logging in through the tunnel.
Users should remove the malicious extension versions as soon as possible. Cursor has released a script to help users detect infections, along with indicators of compromise (IoCs) to identify potential compromises across environments.
“Isolate hosts showing evidence of payload execution or backdoor installation. Remove the unauthorized SSH key, persistence mechanisms, and running tunnel processes, and assess whether the host should be rebuilt. Uninstalling the extension may not be sufficient — the payload drops standalone persistence scripts that keep running,” Cursor notes.
Related:LiteLLM Compromised in Fresh Supply Chain Attack
Related:Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
Related:AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
Related:Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack