From Dev.to
A trojanized Claude Code extension plants an SSH backdoor: the 7-point audit for your machine
This morning's supply-chain drop, two hours old as I write: the VS Code extension [email protected] was trojanized on Open-VSX, published from the account of an Anthropic employee, and the...