After the Claude extension compromise, experts urge a 72-hour IDE extension update cooldown
jcran · x · 2026-10-31
Following today's Claude VSCode extension compromise, ArtemR urges users of VSCode, Cursor, and other VSCode-based IDEs to immediately enable extensions.installCooldownHours. The default of 0 installs extension updates instantly; he sets it to 72 hours, delaying updates by 3 days to neutralize most compromised-update risk, and suggests 336 hours (2 weeks) for the cautious. Not foolproof, but far better than no delay—a cheap supply-chain defense for all VSCode-family editors.
More from coding & agent
- PostTrainBench traces hit 104k monthly downloads — author warns it's likely reward hacking — maksym_andr · 2026-10-31
- Building games with AI? Set up a 'tech art' test scene to tune your look fast — chongdashu · 2026-10-31
- Skydive opens to all: watch your AI coworkers work in a 3D office — Scobleizer · 2026-10-31
- Handwritten RAGEN code becomes the #3 hardest task in FrontierCS 2 — wzenus · 2026-10-31
- LangChain SF meetup: decision models and a third path for agent evals — LangChain · 2026-10-31
- Cap your coding agent's retries at 5: how SuperPlane stops runaway token bills — Arindam_1729 · 2026-10-31