A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

A supply chain attack planted malicious Anthropic Claude extensions on roughly 5,000 developer machines, but flawed code in the tainted extension prevented the attacker from gaining full control. The incident was discovered by chance, and the partial failure limited the breach's impact, though the compromised devices remain a concern for affected developers.