Unverified50% confidenceEventExact time
Version 2.1.313 of a VS Code extension plugin for Claude Code was maliciously tampered with, and backdoor code was implanted in the installer.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/30/2026
First Seen
Valid until: 11/13/2026
Sources
Nearly 5,000 Affected! AI Coding Plugin Found with Backdoor, Officials Urgently Remove It
bilibiliToken家有吞金兽10/30/2026
Related Entities
Related Claims
UnverifiedClaude Code version 2.1.269 added the Plugin Evals feature.78% similarUnverifiedThe library called by this agent downloaded the Claude Code binary itself; both use the same program and the same version (2.1.309).76% similarUnverifiedIn Claude Code v2.1.300, the remote-control diff view fixes the issue of displaying deleted and renamed files as modified, requiring local Claude Code v2.1.296 or higher.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1118327API
curl https://kongchang.com/api/v1/knowledge/claims/1118327MCP
get_claim(id=1118327)