First screen, captured 3 days ago. Hover to scroll the page, or open the video.

Backdoors in official Claude Code extensions

What HN thinks

Nothing says 'certified for agent security' like an SSH backdoor in the marketplace.

Cursor's notice lacks root cause
Commenters found the remediation steps solid but criticized the absence of any explanation of how the malicious extension got published or how recurrence will be prevented.
Parsing 'not developed by Anthropic'
The phrasing drew confusion and jokes about plausible deniability; some suspected compromised publishing accounts, and one commenter later pointed to evidence that Cursor's own marketplace infrastructure was the source.
Fatalism about supply-chain attacks
Some see this as part of a broader trend where nobody is immune and things will get worse, noting the irony of Cursor's recent security certification.

Consensus: Most agree the response handled cleanup but left the attack vector unexplained, and the attribution wording was murky.

Summarised by Claude from the comment thread 2 days ago.

Points: 620
Comments: 184
Best rank: #2
Posted: 2026-10-30 by dsr_
Category: Security

supply-chain-attack claude-code anthropic vs-code-extensions open-vsx cursor backdoor malware

All captures:

Full page

Captured 3 days ago. Click for the whole screenshot.

Looks similar

Screenshot of mastodon.sdf.org: NetBSD adds a new text editor called atto

NetBSD adds a new text editor called atto (mastodon.sdf.org)

181 points by luke8086 4 days ago | 142 comments

Mastodon post from the NetBSD Foundation announcing atto(1), a small modeless text editor added to NetBSD-current's base system, with replies.

netbsd atto text-editors vi

Screenshot of convo.casa: Proton goes all in on using AI

Proton goes all in on using AI (convo.casa)

72 points by ColinWright 3 days ago | 52 comments

A Mastodon post quoting and linking a 404 Media report on Proton CEO Andy Yen pushing employees to adopt AI coding, tracking AI-generated code, and ending engineer hiring.

proton andy-yen ai-coding 404-media

Screenshot of grapheneos.social: Around a dozen banking apps began specifically permitting GrapheneOS

Around a dozen banking apps began specifically permitting GrapheneOS (grapheneos.social)

570 points by privacyishuman 9 days ago | 213 comments

A GrapheneOS Mastodon post explaining banking app compatibility on GrapheneOS, noting about a dozen banks now explicitly permit it, with a link to a compatibility list.

grapheneos android banking-apps play-integrity

Screenshot of twitter.com: Samsung running a TensorFlow lite model on 960x540 image to track you

Samsung running a TensorFlow lite model on 960x540 image to track you (twitter.com)

272 points by mashally 8 days ago | 176 comments

An X post reporting that Samsung Tizen TVs run an INT8 AlexNet TensorFlow Lite model on 960x540 screen captures every few seconds to identify which game is being played.

samsung tizen smart-tv tensorflow-lite

Screenshot of mastodon.social: The only planet where 100% of Linux systems have working audio is Mars

The only planet where 100% of Linux systems have working audio is Mars (mastodon.social)

49 points by rcarmo 3 years ago | 35 comments

Screenshot of fosstodon.org: A large crash spike affecting Firefox users on Linux

A large crash spike affecting Firefox users on Linux (fosstodon.org)

179 points by sohkamyung 3 years ago | 72 comments

Full page

Looks similar

NetBSD adds a new text editor called atto (mastodon.sdf.org)

Proton goes all in on using AI (convo.casa)

Around a dozen banking apps began specifically permitting GrapheneOS (grapheneos.social)

Samsung running a TensorFlow lite model on 960x540 image to track you (twitter.com)

The only planet where 100% of Linux systems have working audio is Mars (mastodon.social)

A large crash spike affecting Firefox users on Linux (fosstodon.org)

Related stories

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace (phorion.io)

The cult of vibe coding is dogfooding run amok (bramcohen.com)

Anthropic hacked to deliver remote access trojan (doublepulsar.com)

Issue: Claude Code is unusable for complex engineering tasks with Feb updates (github.com)

Anthropic hacked to deliver remote access trojan to Claude developer laptops (doublepulsar.com)

Shreddit is a Python program to remove all your Reddit comments (github.com)