Hijacking Claude Code via Injected Marketplace Plugins

#1

Post by jackson-mcd » Thu, Oct 16, 2025, 3:51 PM UTC

Hijacking Claude Code via Injected Marketplace Plugins
promptarmor.substack.com

Re: Hijacking Claude Code via Injected Marketplace Plugins

#2

Post by prasoonds » Thu, Oct 16, 2025, 4:18 PM UTC

Somewhat tangential but I’m curious how people are dealing with these new LLM addons (mcp, extensions for vscode, now CC plugins) at big orgs.

I’ve been using it for personal projects but surely large companies have _some_ way they’re trying to prevent security issues? For instance, I remember one company I worked at blocked us from installing VSCode extensions.

Re: Hijacking Claude Code via Injected Marketplace Plugins

#3

Post by nantes » Mon, Oct 27, 2025, 5:53 PM UTC

prasoonds wrote: post #2

Somewhat tangential but I’m curious how people are dealing with these new LLM addons (mcp, extensions for vscode, now CC plugins) at big orgs. I’ve been using it for personal projects but surely large companies have _some_ way they’re trying to prevent security issues? For instance, I remember one company I worked at blocked us from installing VSCode extensions.

I feel like the lack of response to your question speaks volumes.