A security researcher says a malicious browser extension could take over Claude Desktop and use it as a remote shell, including on a second computer tied to the same account, and says Anthropic closed his May report as a duplicate.
May report · Anthropic · Claude Desktop
A rogue browser extension could reportedly turn Claude Desktop into a remote shell
A researcher says a script can repeatedly click "Allow" in Claude Desktop until a malicious npm package is installed, and that the same attack could reach a second computer on the same account. Anthropic reportedly closed the May report as a duplicate.
How the reported attack chain works
Step 1
Rogue browser extension
→
Step 2
Simulated clicks on "Allow" every second
→
Step 3
Malicious npm package installed
→
Step 4
Attacker runs commands (remote shell)
1 sec
Interval at which the script reportedly clicked the prompt
2 machines
Claimed reach: the original computer plus one signed in to the same account
Duplicate
Status the researcher says Anthropic gave his May report
Reported scope, drawn to scale
Each block is one machine. Based on the researcher's claim, not independently verified.
1
1
Same account, second machine
What the researcher reports
Extension repeatedly simulates clicks on "Allow"
Clicks continued until an npm package was installed
Attacker gains a way to run commands
Reach extends to another computer on the same account
May report closed as a duplicate
What remains unconfirmed
No independent technical verification in the available materials
No public statement from Anthropic on these specific claims
Scope and severity not yet established
Fix status and any change to extension, install, or package handling unknown
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article...