Anthropic: That Claude Code extension compromise… couldn't be us

What the coverage shows

All three outlets frame this as a supply-chain compromise involving a malicious Claude Code extension and roughly 5,000 exposed devices. BleepingComputer is the most specific about the payload, saying the extension planted persistent SSH backdoors, while Wired emphasizes that flawed code in the tainted extension limited the attacker’s reach. The Register is the outlier in tone and attribution, foregrounding Anthropic’s claim that the incident was a targeted supply-chain attack by a “malicious actor.”

Written by Crossfiled from the 3 headlines and extracts below, not from the articles themselves. It describes how the outlets framed this, not what happened. Open any headline for a summary of that article.