Hacker News new | past | comments | ask | show | jobs | submit
wolttam | on: Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

    curl > some_file
    bash some_file
(Also, how in the world would a server be able to tell where you’re piping the response?)

Edit: thanks for the replies, that makes perfect sense

foodevl | parent
Timing. A megabyte of "sleep 10;" would be read from the server more slowly when piped to bash versus written to a file