Backdoors in official Claude Code extensions
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
Polymarket said a security incident involving a compromised third-party provider affected its international platform, Polymarket.com. The company reported that it had identified and fixed the issue and referred the matter to relevant law-enforcement authorities. It did not name the provider or explain how the compromise occurred, what systems or information were affected, or how many traders suffered losses. The announcement framed the response around protecting users: trading was temporarily halted as a precaution while the platform was assessed and prepared to return.
In subsequent updates, Polymarket said trading would resume at approximately 3 p.m. Eastern Time, then confirmed that the platform was fully back online. It also promised to reimburse all traders affected by the incident, describing this as making things right. The statements establish that the disruption was linked to a third-party provider compromise and that trading was paused and restored, but offer few technical details about the breach or its consequences. A reply on X pressed the company to identify the provider, underscoring that this information had not been disclosed.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
A compromised Claude Code extension version 2.1.313 distributed malware that collected developer device details and attempted to install a persistent SSH backdoor. Anthropic replaced the extension with version 2.1.314, but affected devices may still need remediation. (doublepulsar.com)
A compromised Claude Code extension version 2.1.313 attempted to steal device information and install a persistent SSH backdoor on developer computers. Anthropic replaced the extension, but the update does not remove backdoors from devices already infected. (doublepulsar.com)
Researchers report five full cross-tenant compromises in Azure linked to a common underlying weakness. The cases highlight risks to tenant isolation in Microsoft’s cloud platform. (binarysecurity.no)
Binance suffered a $6.3 billion security breach, described as the largest cryptocurrency theft on record, and froze withdrawals. Blockchain intelligence firm TRM blamed North Korea’s TraderTraitor hacking unit; Binance said it was working with law enforcement and that customer funds were safe. (theguardian.com)
A compromised Claude Code for VS Code extension, version 2.1.313 on the Cursor Marketplace, installed a persistent SSH backdoor and sent host information to attackers across macOS, Linux, and Windows. Cursor removed the release; organizations should check for the affected extension and investigate any installations. (phorion.io)
Today's best Hacker News stories, summarized and screenshotted, one email a day.