A security researcher has identified backdoors present in official Claude Code extensions, raising significant supply chain security concerns for developers using the AI coding assistant. The vulnerabilities could allow unauthorized access or code execution within development environments leveraging these extensions. Immediate review and remediation of affected extensions are recommended to mitigate potential exploitation risks.
Read original
hackernews