The part that bothers me is not the backdoor — it's the trust model
What jumps out to me is how boring the malware sounds, in the worst possible way. No clever exploit chain, no exotic persistence trick, just a malicious extension that piggybacks on the same developer workflow people are using to make code edits faster. That is exactly why this feels nasty. If you use Claude Code or any other assistant inside your editor, you are already training yourself to treat extensions as part of the workspace, not something suspicious. Attackers know that. The detail that
papoo.work