Backdoors in official Claude Code extensions

Re:Backdoors in official Claude Code extensions by AdrianCX on Friday October 30, 2026 @08:23AM (#50302952)

OpenVSX has no extension signing, no verification, nothing...

So really, there's no way to say what was compromised and where.

This could have been avoided by having extensions signed by company doing them with their own keys and have them reviewed

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by LtWorf on Friday October 30, 2026 @07:32PM (#50311525)

I doubt these vibe coders understand what you're saying.

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by slashdave on Friday October 30, 2026 @07:52PM (#50311690)

Wait... and people use this?

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by skinfaxi on Friday October 30, 2026 @08:27PM (#50311964)

People tell me you can just have directives in a markdown to tell AI not to use certain directories or privileges. They really have no idea.

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by dannyw on Friday October 30, 2026 @09:06PM (#50312222)

People here copy and paste random "curl $x | bash" commands all the time.

[ Parent | on HN ]