AI · SEMICONDUCTOR · FACT CHECK

SKD WIRE

EN WIRE · 2026-10-30 23:05

Compromise of Official Claude Code Extension Ruled Mostly True, 11 Primary Sources Weighed

Mostly True

Compromise of Official Claude Code Extension Ruled Mostly True, 11 Primary Sources Weighed
Image source: 조사 출처

The claim that an extension associated with Anthropic's official Claude Code development tool was compromised has been assessed as largely accurate, with the assessment drawing on 11 primary sources. However, domestic media coverage could not be confirmed during the review process, leaving open questions about the incident's footprint in Korean reporting.

원문 주장 (KR)
Official Claude Code extension compromise

What Was Checked

The verification centered on the claim of an "official Claude Code extension compromise." Reviewers examined assets hosted on the official claude.com/claude-code page, with images served from Anthropic's official asset CDN — indicating the Claude Code page and its associated extensions remained active points of reference during the review.

Primary sources reviewed numbered 11, forming the evidentiary basis for the assessment.

Limits of the Review

A significant gap remains: domestic (Korean) reporting on the incident could not be confirmed. The review environment lacked configured NAVER_CLIENT_ID/SECRET credentials in its .env file, meaning searches of Korean media coverage could not be executed. As a result, no conclusion could be drawn about whether Korean outlets had independently covered the compromise.

This does not affect the core claim's standing, but it means the picture of the incident's coverage is incomplete.

Bottom Line

The core claim of an official Claude Code extension compromise stands on the weight of the primary sources reviewed, while the absence of verifiable domestic coverage remains an open caveat. On balance, the claim is judged Mostly True.

Verdict: Mostly True

Sources — primary documents (11)
  1. https://cursor.com/blog/claude-code-extension-security-notice
  2. https://phorion.io/blog/offical-claude-code-vsx-compromise/
  3. https://open-vsx.org/extension/anthropic/claude-code
  4. https://web.archive.org/web/20261030135037/https://open-vsx.org/extension/anthropic/claude-code
  5. https://raw.githubusercontent.com/anthropics/claude-code/main/CHANGELOG.md
  6. https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html
  7. https://www.helpnetsecurity.com/2026/10/30/claude-code-extension-ssh-backdoor/
  8. https://www.reuters.com/business/media-telecom/cursor-says-up-5000-users-affected-by-tampered-claude-code-extension-2026-10-30/
  9. https://www.yahoo.com/news/articles/cursor-says-5-000-users-083232048.html
  10. https://assets.claude.com/454390de9d9ccefb6082b7c2440c7547c1ec3964.webp
  11. https://assets.claude.com/f66071070c4701ea2c37fc01b3c0f83623cf29d3.jpg

KR: /news/20261030-fa0bd0 · 판정: 대체로 사실