Claude Code VS Code Extension Had a Trojan Today, Claims Researcher, Zero Coverage
evilsocket · x · 2026-10-30
Security researcher 0xOsprey claims Claude Code's VS Code extension shipped with a trojan today and received virtually zero coverage, warning "tomorrow will be worse." The claim is unverified and Anthropic has not responded, but it highlights growing supply-chain security risks around popular AI coding tools.
More from coding & agent
- Mistral open-weights 1T-param Le Chonk; TRL day-0 LoRA SFT on a single node — FerdinandMom · 2026-10-30
- LFM2.5 Pi LoRA goes GGUF: run the RL-trained agent adapter in llama.cpp — yb2698 · 2026-10-30
- Pi-100 steps hit best tradeoff: LFM2.5 LoRA cuts 37% tool calls — yb2698 · 2026-10-30
- LFM2.5-24B LoRA adapters for Pi and Claude Code cut tool calls up to 40% — yb2698 · 2026-10-30
- An 83-Tool MCP Server Cut AI Bad Calls to 1 in 290: Four Lessons — fcf41 · 2026-10-30
- How High Should You Set a Model's Reasoning Level for AI Coding? — TgnOrdaX · 2026-10-30