Evidence · DiggingBeagle record
Forever Security: ThisBash and the Claude Dispatch cross-device task path
A malicious browser extension with permission to operate on claude.ai used the user authenticated site context to invoke Claude Dispatch task APIs and manipulate approval UI while a desktop assistant remained paired. Forever Security demonstrates a synthetic remote task culminating in an npm postinstall action that opened Calculator on a paired desktop. The prerequisites include extension permissions and an active connected desktop; this is not a generic extension-free remote exploit. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
A malicious browser extension with permission to operate on claude.ai used the user authenticated site context to invoke Claude Dispatch task APIs and manipulate approval UI while a desktop assistant remained paired. Forever Security demonstrates a synthetic remote task culminating in an npm postinstall action that opened Calculator on a paired desktop. The prerequisites include extension permissions and an active connected desktop; this is not a generic extension-free remote exploit. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (3)
- supportsA browser extension could dispatch tasks to a paired Claude desktop: Forever Security demonstrates a synthetic remote task culminating in an npm postinstall action that opened Calculator on a paired desktop. The prerequisites include extension permissions and an active connected desktop; this is not a generic extension-free remote exploit.
ThisBash reproduction; Dispatch API and desktop execution
- supportsA browser extension could dispatch tasks to a paired Claude desktop: A malicious browser extension with permission to operate on claude.ai used the user authenticated site context to invoke Claude Dispatch task APIs and manipulate approval UI while a desktop assistant remained paired.
ThisBash reproduction; Dispatch API and desktop execution
- supportsA browser extension could dispatch tasks to a paired Claude desktop: Forever Security demonstrated a malicious browser extension acting within an authenticated Claude web session, issuing Dispatch tasks and interacting with approval controls until a paired desktop ran an installation command in a controlled example.
Cross-device Dispatch research demonstration and approval interaction