why didn’t claude catch and prevent this?
Claude hacked itself.
Probably.
Phorion’s write up is helpful (Linked in TFA). Why it uploads a list of sensitive environment variables instead of the actual values… lol. I guess that’s a silver lining.
We were supposed to hang in there 18 months but couldn’t hang in there a week.
Didn’t need a weekend anyway.
Fuck.
Discussion on HN says it was actually an extension for Cursor VSCode? So much as I find satisfaction in Anthropic crashing and burning, I’m not sure this is it.
Cursor is a VS Code fork which uses Open VSX extension marketplace rather than Microsoft one. Other forks like VS Codium also use Open VSX.
Given how fast AI companies are to claim credit for hacks they didn’t really contribute to (like recent PHP2Shell) I don’t mind the same being done to them. If media can call DDoSed website “hacked” then we can definitely say Anthropic was hacked.
LLMs are a hacker’s wet dream.
