Re:Backdoors in official Claude Code extensions
by no-name-here on Friday October 30, 2026 @11:19AM
(#50305156)
> Anthropic only has an official extension for VS Code.
That likely seems incorrect as I see Claude Code listed on open-vsx with:
* An "Anthropic" "Verified publisher" badge
* igorkofman listed who seems to be an Anthropic employee
* 63M downloads
* Reviews going back >1 year
Re:Backdoors in official Claude Code extensions
by TazeTSchnitzel on Friday October 30, 2026 @01:03PM
(#50306816)
And it is linked to here: https://code.claude.com/docs/en/vs-code (or, well, the URI doesn't tell us if it's using a proxied version or not, so it's complicated)
Re:Backdoors in official Claude Code extensions
by mday404 on Friday October 30, 2026 @12:02PM
(#50305850)
The AI summary here is right and the human info is wrong -- Anthropic does publish the Cursor extension in general, but did not publish this version
Re:Backdoors in official Claude Code extensions
by mirashii on Friday October 30, 2026 @10:12PM
(#50312599)
I’d say it’s more correct that Anthropic publishes the Open VSX version, and Cursor mirrors it in their own repository, labeling it as being published in their mirror by Anthropic even though it is not.
IIUC Anthropic does not publish extensions for Cursor. It’s basically, official Claude code extension “clone” not by Anthropic.
Ai summary in better words: The Recent Malicious Build (v2.1.313): A tampered version of this extension (version 2.1.313) was uploaded to the Cursor extension marketplace. This specific, malicious build was not developed or authorized by Anthropic. Attackers effectively hijacked or spoofed the extension's legitimate identity within the Cursor/Open-VSX system to bundle an unauthorized SSH backdoor into the real Anthropic code.