A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

October 30, 2026 Lily Hay Newman

Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines.

Previous Article
How a Contractor’s Claude Agent Got Into the Pentagon
How a Contractor’s Claude Agent Got Into the Pentagon

This week on Uncanny Valley, we also discuss Anthropic’s IPO filing and the volunteers gearing up to counte...

Next Article
People Are Creating ‘Survival Guides’ to Cope With the ‘AO3 Apocalypse’
People Are Creating ‘Survival Guides’ to Cope With the ‘AO3 Apocalypse’

The fanfic site could be down for weeks due to a “security incident.” Users are not taking it well.