A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
2026-10-30 · WIRED
A supply chain attack slipped malicious code into Anthropic's Claude extensions, potentially compromising around 5,000 developer machines. The only thing that saved those devs from full exploitation was the attacker's own buggy code — because apparently even hackers targeting AI tools can't ship clean software. Nothing says 'trustworthy AI ecosystem' like your coding assistant doubling as a trojan horse.