Backdoors found in official Claude Code extensions amid supply-chain attack
dsr_ · hn · 2026-10-30
GossiTheDog reports backdoors planted in official Claude Code extensions, part of an attack that also delivered remote access trojans to Anthropic developer laptops. The supply-chain compromise of AI dev tooling means Claude Code users should watch for official advisories and check their machines.
More from coding & agent
- TestSprite auto-generates 35 end-to-end browser tests for an AI-built RSVP app, 34 pass — alexisjross · 2026-10-30
- OpenAI DevDay community edition lands in Stockholm Nov 21 with $150 in credits — paw_lean · 2026-10-30
- Microsoft's Work IQ connects business app context, unveiled at PPCC26 keynote — donasarkar · 2026-10-30
- Codex turns Apple Photos pets into a Samsung Frame TV art channel — sch · 2026-10-30
- YC-Backed Mirrors Launches to Catch and Fix Your AI Agent's Repeated Mistakes in Real Time — ycombinator · 2026-10-30
- Perplexity Computer can now control your Chrome via new extension — AravSrinivas · 2026-10-30