Claude Code VS Code extension reportedly compromised on Open VSX
The oss-security note says the Microsoft Visual Studio Marketplace copy was allegedly not affected, but the post is incomplete.
68
Organization
Open VSX
- Mentions · 7d0
- Mentions · 30d2
- All mentions4
- First seenSep 1, 2026
- Last mentioned12d ago
Timeline
4 articles · newest firstTrojanized Claude Code extension on Open VSX installs an SSH backdoor
Version 2.1.313 beacons to 134.209.82.225 and plants an Ed25519 key; Anthropic’s Microsoft Marketplace build is not implicated.
76
GlassWorm Supply Chain Attack Hides Malware Inside VS Code Color Themes
GlassWorm-linked malicious VS Code color themes on Visual Studio Marketplace and Open VSX shipped staged JavaScript loaders that pulled C2 addresses from Solana memos.
78
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
77 malicious 'evil twin' Open VSX extensions impersonated developer tools and exfiltrated hostnames and detailed workspace reconnaissance to mangorbit.com.
40
Appears with
- Claudeai model · 2
- Microsoftorganization · 2
- Anthropicvendor · 2
- Visual Studio Codeproduct · 1
- Shai-Huludmalware · 1
- OX Securityvendor · 1
- Open VSXproduct · 1
- Mini Shai-Huludmalware · 1
- Manifold Securityvendor · 1
- Claudeproduct · 1
- Microsoftvendor · 1
- GlassWormmalware · 1
- Claude Codeproduct · 1
- Bunvendor · 1
- Cursorproduct · 1
- Socketorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.