Dev tooling is the new attack surface

Two threads (50302334, 50301983) cover backdoors in the official Claude Code extensions, delivering a remote access trojan. The affected build was on the Open VSX registry, which means Cursor's marketplace too. Cursor posted its own security notice. One commenter says he confirmed Binance uses the extension. Another noticed the extension pushes an update every office day, so the practical question for anyone is whether they updated during the bad window. A third thread (50301854) lists five full cross-tenant compromises in Azure, which commenters call basic path traversal and IDOR bugs that have likely been there since launch. The Binance theft (50296470) sits next to these, with $2.4B already frozen by Circle and Tether.

The pattern here: attackers go where the keys are, and the keys now live inside AI coding agents and cloud control planes. An agent extension runs with your repo, your shell and your credentials. Auto-updating means one bad push reaches everyone fast. Commenters were also frustrated by thin disclosure, with 'how legit is this?' showing up as a top reaction.

The counterpoint is that details are still sparse, and the Binance link is a single comment, not an established fact.