Non-OSS: Claude Code for VS Code extension compromised

Summary by Cyber Security News30 Oct 2026, 13:18 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/443

Posted by Valtteri Vuorikoski on Oct 30 Apologies for posting a non-open-source item, but since I get the impression that quite a few open-source maintainers use Anthropic products by various means nowadays, this might be a compromise vector in such projects: Reportedly the official Claude Code for VS Code extension on the Open VSX extension marketplace for VS Code derived editors such as Cursor (but allegedly not the Microsoft Visual Studio Marketplace which serves apps…

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.