Official Claude Code extensions shipped with hidden backdoors
Backdoors in official Claude Code extensions
Security researcher Kevin Beaumont reports that official Claude Code extensions contain backdoors. The finding raises uncomfortable questions about the trust placed in vendor-published tooling for AI coding agents, where extensions run with broad access to a developer's environment and codebase.
Backdoors in official Claude Code extensions.
- tomhow
Comments moved to https://news.ycombinator.com/item?id=50300683.
- altbdoor
Cursor has released a security notice:
https://cursor.com/blog/claude-code-extension-security-notic...
Edit: related https://news.ycombinator.com/item?id=50301983
- rhedak
These days no one is immune to these kind of attacks... Honestly it will only get worse from here.