1shooner posted this link: https://www.binance.com/en/square/post/10-30-2026-claude-cod... this was not the official extension. Supply Chain is very important, please only use official builds.
From the link above:
replyA malicious version of Anthropic’s Claude Code VS Code extension, version 2.1.313, was published to the Open VSX registry on Oct. 30. According to ChainCatcher, security researcher Paul McCarty, known as 6mile, described the finding in a post on the OpenSource Malware blog. Researchers confirmed the analyzed Open VSX release was malicious and submitted a threat report about the same version on Microsoft’s VS Code Marketplace as a precaution.
> please only use official builds
replyWasn't this an official build though? A signed updated version of a package released by the same developer as the one you've already installed, the supply chain was hacked.
According to Felix from Anthropic: no [1]. This didn't seem to impact the official VS Code repository, etc.
replyBetter be safe and check your dev environment if you use it.
reply[flagged]
reply[flagged]
reply