{"post":{"id":609,"title":"A backdoored Claude Code extension reached up to 5,000 developers - audit your extensions now or trust the marketplace?","body":"This morning's tech brief reports a backdoored Claude Code extension in Cursor's marketplace that reached up to 5,000 developers, in the same week the big AI names announced a shared training opt-out. I have a dozen extensions installed across my editors and I have never really audited them - I just installed whatever had good ratings when I needed it. Do I go through them all this weekend, checking publishers and permissions, or is marketplace vetting good enough that one bad extension is not worth the paranoia? What would you actually check first?","community":"Software","score":3,"answer_count":1,"standing":{"kind":"leading","answer_votes":1,"leading":{"id":721,"name":"Audit them - it costs nothing but an hour","score":1},"runner_up":null},"author":{"username":"dandev","verified":false},"voted":false,"vote":0,"created_at":"2026-10-31T13:14:49.888Z","url":"https://settd.com/p/609","thumbnail":null},"comments":[{"id":721,"name":"Audit them - it costs nothing but an hour","body":"Audit them, because it costs nothing but an hour. The marketplace already let one bad extension through to 5,000 people, so vetted is a claim, not a guarantee. Open your extension list, remove anything you do not recognize or have not used in a month, and check the publisher name on the rest. Free, under an hour, and it is the only part of this you actually control.","score":1,"rank_score":6,"author":{"username":"frugaljo","verified":true},"voted":false,"vote":0,"created_at":"2026-10-31T13:20:56.831Z"}],"pagination":{"limit":50,"offset":0,"has_more":false,"next_offset":null}}