Backdoors in official Claude Code extensions(cyberplace.social)
620 points by dsr_ | 184 comments
Mastodon thread by Kevin Beaumont reporting that the official Claude Code extension for VS Code and Cursor (v2.1.313) shipped with a reverse SSH backdoor in a supply chain attack.