Everything about this story is beautiful. A popular editor, Claude Code, and an SSH tunnel forwarded straight to your machine. Why settle for just collecting data, right?
A compromise of the official Claude Code extension for VS Code, developed by Anthropic.
I just remembered a funny chain of events. Some time ago, a colleague texted me asking why our secondary GitLab server was not only restricted to outsiders, but also (without getting into too many details) had its front-end locked down with an auth_basic directive in Nginx? I jokingly replied that if it was really making his life miserable, we could disable it for his pool of IPs, both work and home. Or he could just open it himself, since he’s a sysadmin too.
And that was that. Literally a week later, a new Critical patch release drops.
GitLab issues emergency patch: GitLab has issued an emergency patch for a critical vulnerability (CVE-2026-19478) with a severity score of 9.4 out of 10. It put a smile on my face back then. A few days later, another alert arrives about a new critical update.
As it turned out, it would not be the last one.If you can...