upvote
It affects their VSCode marketplace extension which in turn affects their cursor extension. Their official published version. This is plenty of reason to panic.
reply
where is the source for this claim?
reply
> where is the source for this claim?

https://news.ycombinator.com/item?id=50302334 ???

reply
deleted
reply
https://opensourcemalware.com/blog/trojanized-claude-code-ex...

"The Microsoft VSCode extension for Claude is NOT malicious"

reply
They already got my post autoflagged. Just the run-of-the-mill disinformation campaign.
reply
deleted
reply
> Their Claude Code extension on Visual Studio Code and Cursor has malware in it, which creates a remote access Trojan to desktops.
reply
From the release:

"The Microsoft VSCode extension for Claude is NOT malicious"

https://opensourcemalware.com/blog/trojanized-claude-code-ex...

reply
> "Their Claude Code extension on Visual Studio Code and Cursor has malware in it"

why are you spewing straight up lies?

reply
reply
They yanked the openVSX version as well. Until we hear from Anthropic better to assume compromise.
reply
FROM THE TOP OF THE ARTICLE

"The Microsoft VSCode extension for Claude is NOT malicious"

reply
EDIT: This comment is probably nonsense, cf. the reply.

dang should change the title and/or merge this submission with the other one. [1] This is causing needless panic for a typosquatting-style "attack" unrelated to official Anthropic extensions.

[1]: https://news.ycombinator.com/item?id=50301983

reply
It’s not typo-squatting. The extension is owned by Igor (the Anthropic employee): https://www.binance.com/en/square/post/10-30-2026-claude-cod...
reply
deleted
reply