Backdoors in official Claude Code extensions

Re:Backdoors in official Claude Code extensions by john_strinlai on Friday October 30, 2026 @12:29PM (#50306269)

>the corporate laptop

an anthropic laptop? why are you sketpical?

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by abirch on Friday October 30, 2026 @12:47PM (#50306558)

Exactly and why wouldn't the thieves publish to the official VS Code or Open VSX market places?

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by crooked-v on Friday October 30, 2026 @04:43PM (#50309891)

Because what they had was some kind of admin access to Cursor's mirror of OpenVSX, and not anything else.

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by quietbritishjim on Friday October 30, 2026 @07:43PM (#50311626)

I guess they're skeptical because it seems incredible that having access to Cursor's marketplace would allow you to publish updates to a different organisation's extensions.

In fairness, that is very surprising.

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by dannyw on Friday October 30, 2026 @09:05PM (#50312213)

Reading between the lines, it seems like Anthropic isn't involved in the "official by Anthropic" extension at all.

Cursor seems to be scraping extensions from Microsoft's marketplace, and repackaging it and keeping the metadata.

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by stingraycharles on Friday October 30, 2026 @09:55PM (#50312503)

Wow if that is the case… Cursor certainly needs to communicate much more clearly that Anthropic wasn’t involved in this at all.

[ Parent | on HN ]

Re:Backdoors in official Claude Code extensions by mike_d on Saturday October 31, 2026 @03:16AM (#50313934)

Cursor is now Grok, so are you really surprised?

[ Parent | on HN ]