Hacker News new | past | comments | ask | show | jobs | submit
nubinetwork | on: Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
It looks like they push an update every office day. I'm guessing if I installed 6 months ago and didn't update, that I should be fine?
staminade | parent | next
I think VS Code extensions autoupdate by default, unless you disable it.
loading story #50302848
fn-mote | parent | next
Emphasis on guessing. If/when there is an actual postmortem, you’ll know when the back door was introduced.
fg137 | parent | next
You are either lucky or compromised.
koolba | parent
Not updating air gapped systems is a security feature, not a bug.