76/100
Phorion researchers found that a tampered build of Anthropic's Claude Code extension for VS Code-compatible editors, version 2.1.313, was published on Open VSX and planted an SSH backdoor on developers' machines. Microsoft's Visual Studio Marketplace never carried the compromised extension. Users of Open VSX-based editors should check for this version; remediation steps need checking in the supplier advisory.