Summary
Togoder Security scanned the VS Code Marketplace package anthropic.claude-code@2.1.322+darwin-arm64 on Nov 10, 2026. An AI review of 1 source file produced 3 low severity findings. No malicious behavior was identified in the reviewed files, but 2 files were not reviewed (too large), so this version is not fully cleared: check those files before relying on it.
Findings 3
startup activation
NPS-3B44D0F58BDE
The extension activates on 'onStartupFinished', so its code loads at every editor start. A chat/agent extension is expected to register its views, webview panels and keybindings at startup; nothing in the manifest points to hidden code — 'main' is the ordinary './extension.js'. Notable for transparency but consistent with purpose.
untrusted workspace unsupported
NPS-DFD31CF33C6C
The extension declares it does not support untrusted workspaces, which is appropriate for an agent that reads and writes files and runs a process; it is a safety posture, not a risk.
manifest typo
NPS-D2684068C66F
Descriptions contain minor typos ('untusted'). Cosmetic only.
Files reviewed
| File | Verdict | Result |
|---|---|---|
| package.json | low | 3 findings |
Files not reviewed 2
These files were listed in the package but not reviewed, so the verdict above does not cover them.
| File | Reason |
|---|---|
| extension.js | Not reviewed: file too large (3495KB > 1024KB) |
| webview/index.js | Not reviewed: file too large (5906KB > 1024KB) |
Frequently asked questions
Is anthropic.claude-code safe to use?
Our AI source review found no malicious code in the 1 files of anthropic.claude-code@2.1.322+darwin-arm64 it reviewed, but 2 files were not reviewed (too large), so this version is not fully cleared. Check those files before relying on it.
Does anthropic.claude-code contain malware?
No malware was identified in the reviewed files of anthropic.claude-code@2.1.322+darwin-arm64 when Togoder Security scanned it on Nov 10, 2026; 2 files were not reviewed (too large). A new version can still introduce malicious code, so scan the exact versions in your lockfile.
How was anthropic.claude-code checked?
Togoder Security downloaded the published VS Code Marketplace package and had an AI model read its 1 source files, looking for install scripts, credential access, network exfiltration, obfuscation, backdoors and crypto-wallet theft. The results are cached by file hash and shown here.
How do I scan anthropic.claude-code together with the rest of my dependencies?
Upload your lockfile at https://security.togoder.click/scan or call the API documented at https://security.togoder.click/api-docs. Files that have already been scanned, like the ones in anthropic.claude-code@2.1.322+darwin-arm64, cost nothing.