Claude Code OpenVSX extension backdoored, tied to Anthropic employee's publisher account
banteg · x · 2026-10-30
banteg amplified a report that the Claude Code extension on OpenVSX was backdoored. A follow-up screenshot notes the affected extension's owner is Igor Kofman, an Anthropic employee; it's unclear whether his account or another publishing function was compromised. Investigation is ongoing — a notable supply-chain incident targeting AI coding tools.
More from coding & agent
- Your LLM eval is probably lying: 4 failure modes and cheap fixes from an Istanbul talk — irombie · 2026-10-30
- LFM2.5 Pi LoRA goes GGUF: run the RL-trained agent adapter in llama.cpp — yb2698 · 2026-10-30
- Pi-100 steps hit best tradeoff: LFM2.5 LoRA cuts 37% tool calls — yb2698 · 2026-10-30
- harness-hub ships LFM2.5-24B LoRA adapter collection for Pi and Claude Code — yb2698 · 2026-10-30
- An 83-Tool MCP Server Cut AI Bad Calls to 1 in 290: Four Lessons — fcf41 · 2026-10-30
- How High Should You Set a Model's Reasoning Level for AI Coding? — TgnOrdaX · 2026-10-30