Prewire · case file · public copy of the record
FILE P388 PREWIRE receipts archive the live wire
CATCH #2388 DETECTED OCT 30, 2026 17:12 UTC
THE CATCHscore 8/10
EXHIBIT 2388 · FLASH
Oct 30, 2026 17:12 UTC hacker news https://news.ycombinator.com/item?id=50300683
A VS Code extension named "Claude Code" on the Cursor Marketplace, which claimed to be for Claude, has been identified as containing a backdoor.

✓ VERIFIED — BEAT THE ANNOUNCEMENT BY 31.5H · AUTO-VERIFIED AGAINST ANTHROPIC NEWS

READY TO POST:

heads up, a vs code extension called 'claude code' on the cursor marketplace reportedly had a backdoor. always be careful with third-party tools!

big news on hn about a backdoor in a 'claude code' vs code extension. worth checking your installs if you use cursor marketplace extensions.

EVIDENCE — the receipts
HN story climbing fast:
title: Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
points: 386 in 10.1h = 38 pts/hr
link: https://phorion.io/blog/offical-claude-code-vsx-compromise/
discussion: https://news.ycombinator.com/item?id=50300683

caught by the 20-minute sweep · the live wire · all receipts

THE WIRE RECEIPTS ACCESS @VEDOLOS TERMS PRIVACY break the story before it breaks