Official Claude Code extension compromised in supply chain attack
_chall · hn · 2026-10-30
phorion.io details a compromise of the official Claude Code VSX extension — a supply-chain attack on an officially distributed developer tool. Developers using AI coding tools should watch extension update sources and permissions.
More from coding & agent
- Scratching His Own Itch: Dev Turns Unreliable Social APIs Into ReachSocial.dev — FewScarcity6957 · 2026-10-31
- Microsoft's ScholarEvolve evolves agent harnesses with frozen models, +14 points on AppWorld — jiqizhixin · 2026-10-31
- Team uses Gemini as a subagent for tricky architecture and system design problems — AccBalanced · 2026-10-31
- Toska: Open-Source Krita Fork With an Agentic AI Painter for Under $7/Month — yawk-ra · 2026-10-31
- 'Don't use tools you can't fully control': OpenClaw pitch sparks agent autonomy debate — heyneighbor · 2026-10-31
- Dev builds Waifu Weather iOS app entirely with Claude Code, from Blender 3D modeling to music — MurkyGiraffe5879 · 2026-10-31