Friday, October 30, 20265 stories

Trezor reports suspected hardware implant in Safe 5 sold by CryptoBilis

Software · 3 sources

Trezor urged CryptoBilis buyers to migrate funds after receiving a credible report of a hardware implant inside a Safe 5 device.

Trojanized Claude Code extension on Open VSX planted a persistent SSH backdoor

AI · 4 sources

OpenSourceMalware analyzed version 2.1.313 on Open VSX and says its prepended loader added an SSH key, opened a reverse tunnel and set persistence.