Backdoors in official Claude Code extensions

AI summary

It was reported that malware was injected into Anthropic's official Claude Code extensions for Visual Studio Code and Cursor, creating a remote access Trojan for desktops.

Key points

•Anthropic's official Claude Code extension was compromised.
•Malware was used to create a remote access Trojan for desktops.
•The extensions targeted were for Visual Studio Code and Cursor.

Read the original

#Security & Misuse #Major Players #Generative AI Tools & Use #Claude Code

#Security & Misuse#Major Players#Generative AI Tools & Use#Claude Code

Hacker News11/6/2026

Claude Code sends your email address to websites

A bug in Claude Code was reported where it leaks email addresses in User-Agent headers during web searches, causing users to receive numerous scam emails.

Hacker News11/6/2026

Show HN: Stroq – a local audit of what your coding agent did and why

Introduces Stroq, an open-source tool that finds known secrets in AI coding agent sessions like Claude Code, Codex, and Cursor, and guards the next session with local hooks that trace risky commands to their source content.

Hacker News11/5/2026