Anthropic got hacked | Eli the Computer Guy
The Tech Report on YouTube. Gemini watched it and picked out the claims.
In an episode of The Tech Report, host Isaac Pound and guest Eli Etherton discuss a reported supply chain attack involving Anthropic's Claude Code extension on the Cursor marketplace, as well as the broader security, infrastructure, and commercial impacts of autonomous AI agents.
What it claims
Most worth checking first. Each checked claim was asked of all five models, like any question.
-
1:06Isaac Pound
Anthropic's official account published a malicious version of Claude Code to the Cursor marketplace.
They don't agree. -
1:23Isaac Pound
Up to 5,000 developer machines downloaded or installed the compromised Claude Code extension patch.
Yes. Cursor said at most 5,000 users -
1:11Isaac Pound
Neither Anthropic nor Cursor publicly explained what occurred during the Claude Code compromise incident.
They don't agree. -
2:01Eli Etherton
Cursor is part of SpaceX.
Yes. SpaceX acquired Cursor in 2026. -
4:19Eli Etherton
The compromised extension auto-updated in the background on users' machines.
Yes. Compromised extensions auto-update in the background. -
4:29Eli Etherton
The malicious Claude extension configured and hijacked SSH to establish a reverse SSH connection to hackers' machines.
Not checked yet
-
4:56Eli Etherton
The malicious extension attempted to make reverse SSH persistent across machine reboots.
Not checked yet
-
8:13Eli Etherton
Ars Technica reported a case where a Claude user had their account tokens drained over three days while not using the service.
Not checked yet
-
8:44Eli Etherton
Anthropic informed a customer whose tokens were drained that Anthropic did not have log files recording the requests.
Not checked yet
-
10:12Eli Etherton
In the account drain incident, a hacker hijacked a session key to recreate an OAuth token.
Not checked yet
-
12:25Isaac Pound
Amazon and several banks have started blocking external AI agents.
Not checked yet
-
21:11Isaac Pound
Amazon blocked Meta's AI agent from its platform.
Not checked yet
-
30:34Eli Etherton
Anthropic created the Model Context Protocol (MCP).
Not checked yet