Backdoors in official Claude Code extensions
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
Polymarket temporarily suspended trading on its flagship international prediction-market platform after a breach at an unnamed UK-based third-party provider exposed traders’ wallets and led to funds being stolen. The company said its own website was not hacked, notified UK law enforcement, and resumed trading after investigating for several hours. Blockchain analytics firm Bubblemaps estimated that about 700 users were affected and roughly $2.7 million was taken; Polymarket did not confirm those figures but promised to reimburse affected traders. The incident did not affect Polymarket US, a separate platform operating as a federally regulated exchange for customers in the United States.
The breach adds to security concerns surrounding the cryptocurrency-based international service: traders also lost more than $2 million in a June 2026 incident. Polymarket, launched in 2020, has drawn scrutiny beyond cybersecurity, including alleged insider-trading cases involving a soldier accused of betting on the capture of Venezuela’s former leader and a Google employee accused of profiting from confidential information. Both defendants have pleaded not guilty. Despite these controversies, the company raised $1 billion in August 2026 in a round led by a firm associated with Donald Trump Jr., reaching a reported valuation of $21 billion. The episode highlights the risks users face when trading through a platform that relies on outside providers, even as Polymarket says it will cover the latest losses.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
A compromised Claude Code extension version 2.1.313 distributed malware that collected developer device details and attempted to install a persistent SSH backdoor. Anthropic replaced the extension with version 2.1.314, but affected devices may still need remediation. (doublepulsar.com)
A compromised Claude Code extension version 2.1.313 attempted to steal device information and install a persistent SSH backdoor on developer computers. Anthropic replaced the extension, but the update does not remove backdoors from devices already infected. (doublepulsar.com)
Researchers report five full cross-tenant compromises in Azure linked to a common underlying weakness. The cases highlight risks to tenant isolation in Microsoft’s cloud platform. (binarysecurity.no)
Binance suffered a $6.3 billion security breach, described as the largest cryptocurrency theft on record, and froze withdrawals. Blockchain intelligence firm TRM blamed North Korea’s TraderTraitor hacking unit; Binance said it was working with law enforcement and that customer funds were safe. (theguardian.com)
A compromised Claude Code for VS Code extension, version 2.1.313 on the Cursor Marketplace, installed a persistent SSH backdoor and sent host information to attackers across macOS, Linux, and Windows. Cursor removed the release; organizations should check for the affected extension and investigate any installations. (phorion.io)
Today's best Hacker News stories, summarized and screenshotted, one email a day.