Backdoors in official Claude Code extensions
2 comments
- Points54
- Comments8
2 comments
Story details from Hacker News ↗ · linked article on cyberplace.social.
Backdoors in official Claude Code extensions was first seen on Hacker News · Front page on Oct 30, 2026. Since then it has appeared in 12 checks on 1 different day. Its best position was #3 of 30, reached on Oct 30, 14:07 UTC. It dropped off the list after Oct 30, 14:22 UTC. The same link also trended on Lobsters, which raises its cross-platform score.
Position on Hacker News · Front page at every check (lower is better).
Best rank per day (UTC).
Platform metric as reported by Hacker News.
| List | Best | Days | Checks | Last seen |
|---|---|---|---|---|
| Hacker News · Front page | #3 | 1 | 12 | |
| LLobsters · Hottest Backdoors in Claude Code for VS, Cursor official extensions | same link | |||
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
Cursor has released a security notice: https://cursor.com/blog/claude-code-extension-security-notic...
It looks like they push an update every office day. I'm guessing if I installed 6 months ago and didn't update, that I should be fine?
I think it should be important to note that this affected the Claude Code extension on the Open VSX extension registry (and by extension, the Cursor marketplace). From what is currently known, the build on the official marketplace was/is clean.
Not at the moment. It was last on the list on Oct 30, 14:22 UTC, after 1 day of trending.
#3 on Hacker News · Front page, on Oct 30, 14:07 UTC. Trendoday checks this list every 15 minutes.
It was first seen on Oct 30, 2026 and has been on the list on 1 day (12 checks) since.
54 points and 8 comments; submitted by dsr_ on Oct 30, 2026.