Malicious Claude Extensions Spread via Supply Chain Attack, Reaching Thousands of Devices

A supply chain attack placed malicious versions of Anthropic Claude extensions onto thousands of developer machines. The tainted extensions were designed to spread further into the systems they reached. A flaw in the malicious code, however, kept the attacker from fully infiltrating roughly 5,000 developer computers. The report highlights how the attack was only partly successful due to this stroke of luck. The incident underscores the security risks posed by compromised software distribution channels.