The malicious extension was not developed by Anthropic but was distributed through an official account, constituting a supply chain compromise; the payload attempted to implant a persistent SSH backdoor, steal information such as hostname, username, architecture and public IP, and write it into authorized keys, failing on most machines because it lacked permission to start the service.