OH NO NO NO VIBEGODS!How did this happen in superior AI written software?NOOOOOOO!
TWENTY NINE MILLION MACHINE BOTNET!AHHHHHHHHHH!!!!EVERYONES SSH KEYS ARE COMPED!
>>110201994It's called SI
>>110202037Glad I filtered this one
I barely install any extensions, why would anyone need a vscode extension for an LLM? I just use claude code as-is.Anyways I am scared that one of these big AI companies will suffer a data leak sooner or later.
>>110201994>>110202004retards>only about 5000 users affected>it was not the official VS Code store>it was some third party VS Code store hosted by the Eclipse Foundation as an alternative to the real store
>>110202055the world will know your sadpanda tags
>>110202081you seem pretty nervous anon
>>110202089You sound like a cunt
>>110202089>trolling on /g/
>>110202086Nothing like that, but I have alter egos on the internetz and I've mixed up my claude usage with my real work identity and those alter hobby coding egos .
>>110201994microsoft vs code extension is not affected
it's real!https://www.binance.com/en/square/post/10-30-2026-claude-code-vs-code-extension-2-1-313-found-with-ssh-backdoor-on-open-vsx-382784682398730
>>110202081>it was not the official VS Code storeAnd yet, the hijacked extension was pulled from the official one too?
>>110202037NOOOO YOU HAVE TO USE MY PREFERRED PRONOUNS!!!
>>110202037Only trolls or cucks keep trying to make it happen.
how come opus 5.5 couldnt catch that
>>110201994Is there a date for this? I suspected Claude Code put malware on my Windows install when I used it because I suddenly got an unresolvable freezing issue with Brave that made no sense. I removed the drive, did a full scan, cleaned it up and everything, but the freezing persisted when booting into it in an offline environment. My best guess was that there was something up with the Claude Code extension that had not yet been in s malware database.
>>110202273don't know what you're talking about, I'm using claude code in vscode right now
lol, if you actually visit the link you see it's a nothing burger and caused by elon's incompetent staff
>>110202350They only pulled the affected version?
>>110202369drop a source where it says the official microsoft store was in any way affected
>>110202400The e-celeb reporting on it:https://cyberplace.social/@GossiTheDog/117529406953363269>you need to manually remediate every impacted VSCode and Cursor systemhttps://cyberplace.social/@GossiTheDog/117528960484403268>FWIW the compromised version, 2.1.313, was removed from repos. 2.1.314 is the ‘fixed’ version.
>>110202482https://news.ycombinator.com/item?id=50302650>Version 2.1.313 is also missing from the official VS Code marketplace>Version 2.1.313 is missing from the official Claude Code GitHub repo's CHANGELOG
>>110202400>>110202482>>110202487Lmao, Anthropic are saying it's a Cursor-only issuehttps://news.ycombinator.com/item?id=50304129
>>110201994never forget to add "make no mistakes" when promptcoding
The problem with so many developers becoming dependent on Claude is that it becomes a major central point of failure with so much potential for disaster if it ever becomes compromised.
>>110202037
>>110203302i had the same thought 3 seconds before seeing your post. satisfying when the universe caters to me.
>>110203227It also has full access to their systems because no one approaches AI even remotely intelligently. No, .md guardrails are not enough. You need to properly segment the robot from important things. I only run these things in VMs. I'm thinking about only running them in the cloud.
Why didn't Goythos prevent this?
>>110202004Wasnt it cursors own marketplace not vscode one?
>>110202037Si señor
>>110203302kek
>>110202048Based
>>110201994How many people even use these extensions? I always find them just slow and annoying to use compared to the CLI versions of claude code or codex.
>>110201994they told us, giving these tools for cyberterrorists was a mistake.
