AWS shows how to use Claude Code as a remote agent on Bedrock AgentCore with security controls. The extension generates pull requests on GitHub and attempts to set up access via SSH, but with errors on some systems.

The extension generates a pull request on GitHub after completing the task and includes data retention controls. The solution also offers data protection and governed access, allowing developers to run remote tasks more securely. Malicious versions of the extension were identified on the Cursor VS Code Extension Marketplace, including versions 2.1.312 and 2.1.313.

These versions attempted to establish persistent remote access to users' machines via SSH, turning the extension into an attack surface. Phorion detected a backdoor in the official extension, which raised concerns about the security of using Claude Code. The extension leaves an SSH key in the authorized_keys file, but shows errors on some systems, limiting its functionality.

The malicious versions were removed from the Cursor Marketplace, but the risk of vulnerabilities remains. AWS published the post about the new feature, but there are no details on pricing, technical specifications or release dates in Brazil. The AC-Bridge, a companion device that connects smart lights to code systems, is available on Product Hunt, but it also provides no information on availability in Brazil.

The Claude Code extension received updates that change how developers interact with Bedrock AgentCore. Malicious versions 2.1.312 and 2.1.313 were removed from the Cursor Marketplace after being detected as possible threats. The removal of these versions means users now face less risk of having their systems compromised. These controls help developers keep control over the data generated during sessions.

AWS enables secure remote use of Claude Code on Bedrock AgentCore
Image: aws.amazon.com

Extension can be an attack surface

The Claude Code extension, integrated with Amazon Bedrock AgentCore, allows remote tasks to run with security controls. AWS published the solution, but availability in Brazil has not yet been confirmed.

A task flows from Claude Code through Amazon API Gateway, AWS Lambda and Amazon SQS to an AgentCore runtime session. The sess
Image: aws.amazon.com

With information from osintteam.blog, phorion.io and producthunt.com.

Sources

  1. Extend claude code to remote sessions on amazon bedrock agentcore with security controlsaws.amazon.com
  2. When your ai coding assistant becomes the attack surface the claude code extension securityosintteam.blog
  3. Offical claude code vsx compromisephorion.io
  4. producthunt.com

Text written with AI from the sources listed and checked by the newsroom's automated rules. How we work

Want to see resumer first in Google searches?

Add to Google's preferred sources