It affects their VSCode marketplace extension which in turn affects their cursor extension. Their official published version. This is plenty of reason to panic.
EDIT: This comment is probably nonsense, cf. the reply.
dang should change the title and/or merge this submission with the other one. [1] This is causing needless panic for a typosquatting-style "attack" unrelated to official Anthropic extensions.
It affects their VSCode marketplace extension which in turn affects their cursor extension. Their official published version. This is plenty of reason to panic.
where is the source for this claim?
> where is the source for this claim?
https://news.ycombinator.com/item?id=50302334 ???
1 reply →
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
"The Microsoft VSCode extension for Claude is NOT malicious"
They already got my post autoflagged. Just the run-of-the-mill disinformation campaign.
> Their Claude Code extension on Visual Studio Code and Cursor has malware in it, which creates a remote access Trojan to desktops.
From the release:
"The Microsoft VSCode extension for Claude is NOT malicious"
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
> "Their Claude Code extension on Visual Studio Code and Cursor has malware in it"
why are you spewing straight up lies?
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
They yanked the openVSX version as well. Until we hear from Anthropic better to assume compromise.
FROM THE TOP OF THE ARTICLE
"The Microsoft VSCode extension for Claude is NOT malicious"
EDIT: This comment is probably nonsense, cf. the reply.
dang should change the title and/or merge this submission with the other one. [1] This is causing needless panic for a typosquatting-style "attack" unrelated to official Anthropic extensions.
[1]: https://news.ycombinator.com/item?id=50301983
It’s not typo-squatting. The extension is owned by Igor (the Anthropic employee): https://www.binance.com/en/square/post/10-30-2026-claude-cod...