Official Claude Code VS Code extension compromised to install SSH backdoor

Security researchers disclosed that Anthropic's official Claude Code extension was compromised on the Cursor Marketplace, installing a persistent SSH backdoor on infected hosts. The poster warns users who run the extension in VSCode as a local LLM harness.

• Claude Code reportedly injects user email into prompts, leaking it to websites2026-10-30
• Anthropic launches tools to show AI spending value2026-10-28
• Anthropic files for IPO expected in November2026-10-28
• Hackers breach open-source AI coding tool OpenCode, steal users' API keys2026-10-19
• Sphinx launches Git hook that quizzes developers on AI code before push2026-10-18