[BUG] Open VSX has marked vs code extension as malicious causing VS code forks using Open VSX to uninstall the extension automatically

@erikolofsson Thanks, we received a report to our security channel that the Anthropic.claude-code extension published at open-vsx.org was malware. Could we hear from then Anthropic team?

Found 2 possible duplicate issues:

1. https://github.com/anthropics/claude-code/issues/5698
2. https://github.com/anthropics/claude-code/issues/1246

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

@igorkofman?

Hi folks. The extension is not malware. Please let me know any concerns that were reported.

Igor (igor@anthropic.com)

Happy to update it (though the last published version is fine). I no longer see the namespace in my open-vsx account.

<img width="1279" height="596" alt="Image" src="https://github.com/user-attachments/assets/526ae5f3-ff5b-4fe4-b681-c64cf471670e" />

@igorkofman Sorry about that. We've had a spate of malware over the past month or so and this got caught up in that. I've added you back as owner of the Anthropic namespace. Don't add the extension yet, I need to submit a PR to have it removed from the malicious list. I'll comment here once I see it's been removed from that list.

Thanks, standing by.

On Thu, Aug 14, 2025 at 7:53 AM John Kellerman @.***>
wrote:

kineticsquid left a comment (anthropics/claude-code#5762) <https://github.com/anthropics/claude-code/issues/5762#issuecomment-3188750140> @igorkofman <https://github.com/igorkofman> Sorry about that. We've had a spate of malware over the past month or so and this got caught up in that. I've added you back as owner of the Anthropic namespace. Don't add the extension yet, I need to submit a PR to have it removed from the malicious list. I'll comment here once I see it's been removed from that list. — Reply to this email directly, view it on GitHub <https://github.com/anthropics/claude-code/issues/5762#issuecomment-3188750140>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AADSWQSIXBJEHKHSTQFUJCD3NSPFBAVCNFSM6AAAAACD4SREGKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTCOBYG42TAMJUGA> . You are receiving this because you were mentioned.Message ID: @.***>

OK, you're good to go: https://github.com/EclipseFdn/publish-extensions/blob/master/extension-control/extensions.json

Thanks!. Still getting this error on the web:
"Anthropic.claude-code is a known malicious extension"

On Thu, Aug 14, 2025 at 8:29 AM John Kellerman @.***>
wrote:

kineticsquid left a comment (anthropics/claude-code#5762) <https://github.com/anthropics/claude-code/issues/5762#issuecomment-3188878033> OK, you're good to go: https://github.com/EclipseFdn/publish-extensions/blob/master/extension-control/extensions.json — Reply to this email directly, view it on GitHub <https://github.com/anthropics/claude-code/issues/5762#issuecomment-3188878033>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AADSWQTDEMRVZDVQK36NGYT3NSTOZAVCNFSM6AAAAACD4SREGKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTCOBYHA3TQMBTGM> . You are receiving this because you were mentioned.Message ID: @.***>

Maybe VS code caches a copy of this list?

This issue has been inactive for 30 days. If the issue is still occurring, please comment to let us know. Otherwise, this issue will be automatically closed in 30 days for housekeeping purposes.

This issue has been automatically closed due to 60 days of inactivity. If you're still experiencing this issue, please open a new issue with updated information.

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.