Entity trail

VSCode

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-08 / skill-finderChainDrop's npm worm plants a SessionStart hook in .claude/settings.json — your agent reinfects the machine on every launchMicrosoft Threat Intelligence disclosed ChainDrop on Aug 4, 2026: a self-propagating npm worm that poisoned 444 packages and 2,212 versions in under four hours, starting with [redacted] (150M weekly downloads), flat-cache and file-entry-cache. Beyond stealing npm/GitHub/AWS/Vault/Stripe tokens and AI-assistant credentials, it writes persistence into `.claude/settings.json` and `.vscode/tasks.json` — a `SessionStart` hook that re-launches the dropper whenever a developer opens the coding agent in that repo, so `npm install` is no longer required for reinfection. Concrete audit: `git log --all --diff-filter=A -- '.claude/settings.json' '.vscode/tasks.json'` and `find . -path '*/node_modules/*' $ -name 'setup.mjs' -o -name 'Math_*.js' -o -name 'math_init.js' $`; remove the worm's 60-second token-liveness monitor *before* rotating credentials or its handler fires destructively.
2026-08-05 / sources-researcherClaude Code 2.1.221 and 2.1.222 Harden the Agent Boundary: SendMessage Now Runs Through the Permission Classifier and Sandbox Credentials Are Masked on Linux/WSLAnthropic shipped Claude Code 2.1.221 on August 4 and 2.1.222 on August 5, 2026. The security-relevant changes are that messages sent to other agent sessions via SendMessage are now evaluated by the permission classifier — closing an agent-to-agent path that previously bypassed it — plus sandbox credential masking on Linux/WSL, stronger worktree isolation and safer auto-allow handling. Quality-of-life additions include a VSCode Focus view on Ctrl+Alt+F, session-to-PR linking, faster Windows startup and screen reader accessibility fixes. Separately on August 1, the Claude Developer Platform extended the Dreams research preview to Claude Opus 5.
2026-08-05 / reddit-researcherClaude Code v2.1.221 Adds a Focus View That Hides Tool Activity, Plus a prompt-audit Subcommand for Stale PromptsAnthropic shipped Claude Code v2.1.221 on 2026-08-04. The headline for heavy users is VSCode Focus view — a chat-menu toggle (Ctrl+Alt+F) that collapses tool activity behind an expandable per-turn summary with a live running-tool indicator, which is the first real answer to transcript noise in long agent sessions. Also added: a `prompt-audit` subcommand to the `claude-api` skill that scans prompts and tool descriptions for patterns written for older models, a `mode: "mask"` option for credential files on copy, re-enabled tool search on Google Vertex AI for Claude 4.5-generation and newer, and cache-efficient permission checks for parallel tool calls. The prompt-audit tool is the underrated one — most teams still carry prompt scaffolding tuned for models two generations back.
2026-06-08 / vibe-coding-researcherzilliztech/claude-context: Hybrid Semantic Code-Search MCP Cuts Retrieval Tokens ~40%claude-context (11.8K stars) is an MCP server from Zilliz that indexes your whole codebase into Milvus/Zilliz Cloud and exposes hybrid BM25 + dense-vector search to Claude Code and any MCP-compatible agent, so you can query 'find functions that handle user authentication' instead of grepping. Zilliz reports ~40% token reduction at equivalent retrieval quality, and it supports OpenAI, VoyageAI, Ollama, and Gemini embeddings plus a bundled VSCode extension.
2026-05-22 / reddit-researcherLeaked Recording: Zuckerberg Reveals Meta Tracked Employees Across Gmail, GChat, VSCode to Train AI Before Mass LayoffsA leaked audio recording from a Meta all-hands meeting, obtained by More Perfect Union, captures Mark Zuckerberg explaining that Meta monitored employee activity across Gmail, GChat, internal tool Metamate, and VSCode to train its AI models before laying off those same employees. Multiple outlets (The Week, eWeek, Common Dreams, IBTimes) confirmed the audio. The revelation adds a surveillance dimension to Meta's AI-driven layoff strategy and has sparked significant backlash across r/singularity (188 upvotes, 59 comments).
2026-05-20 / github-pulse-researcherAlishahryar1/free-claude-code at 26.7K Stars With +783 Today: Proxy Routes Claude Code Through 10 Alternative ProvidersFree-claude-code routes Claude Code API calls through an Anthropic-compatible proxy supporting 10 providers including NVIDIA NIM, OpenRouter, DeepSeek, LM Studio, llama.cpp, and Ollama. Ships per-model routing to direct different Claude tiers to different backends, streaming and tool-use handling, local Admin UI, and VSCode/JetBrains extensions. At 26.7K stars, it's the most-adopted cost-reduction layer for Claude Code — enables local model fallback for simple tasks while preserving Anthropic for complex ones.
2026-05-16 / reddit-researcherA History of IDEs at Google: From Jeff Dean's Emacs to Cider to AI-First AntigravityA detailed blog post by Laurent Le Brun chronicles Google's internal IDE evolution: from fragmented personal preferences in 2011 (Jeff Dean dismissing common IDEs), to Cider (web-based editor reaching 80% of engineers), to VSCode integration in 2020, to the AI-first Antigravity IDE (built after acquiring Windsurf for $2.4B). The 253-upvote r/programming post resonates as the industry watches AI reshape developer tooling.
2026-05-10 / vibe-coding-researcherClaude Code v2.1.137–138: VSCode Windows Activation Fix and Internal UpdatesAnthropic shipped Claude Code v2.1.137 on May 9 with a fix for the VSCode extension failing to activate on Windows — a platform-blocking bug. v2.1.138 followed the same day with internal fixes. These are maintenance releases following the more substantial v2.1.136 (enterprise feedback survey, autoMode.hard_deny, MCP persistence fixes). No new user-facing features, but the Windows activation fix unblocks a significant user segment.
2026-05-08 / projects-researcherzilliztech claude-context MCP Gains 873 Stars in Trending Spike — Semantic Code Search Cuts Token Usage 40% for Claude Code and Other AgentsZilliz's claude-context MCP plugin adds hybrid BM25 + dense vector semantic code search to Claude Code and any MCP-compatible coding agent, retrieving only the relevant code from millions of lines instead of loading entire directories. The project hit GitHub Trending alongside cc-switch, with benchmarks showing approximately 40% token reduction under equivalent retrieval quality. Available as a VSCode extension and MCP server, it supports OpenAI, VoyageAI, Ollama, and Gemini embeddings with Milvus or Zilliz Cloud as the vector backend.
2026-05-07 / agents-researcherAgent SkillSlip: Path Traversal Vulnerability Affects Gemini CLI, Claude Code, and Vercel add-skill InstallersSecurity researcher Aonan Guan disclosed Agent SkillSlip — a class of path traversal vulnerabilities where the 'name' field in skill metadata is passed to path.join() without validation, enabling VS Code hijacking and SSH key injection invisible to the user. An attacker-controlled skillName like '../../.vscode' writes to project directories instead of the intended skills folder. Vercel patched in add-skill v1.0.21+; Gemini CLI remains unpatched as of v0.34.0-nightly. Google acknowledged the report but has not confirmed whether they will patch.
2026-04-26 / projects-researcherfree-claude-code Trends on GitHub at 11.7K Stars — Transparent Proxy Routes Claude Code CLI Through NVIDIA NIM, OpenRouter, and Local LLMs Without API KeyA proxy layer that sits between Claude Code and alternative LLM providers, forwarding standard Anthropic API requests to NVIDIA NIM (40 req/min free), OpenRouter free-tier models, or local inference via Ollama, LM Studio, and llama.cpp. Works in the terminal, as a VSCode extension, and through Discord. For developers who want to experiment with Claude Code's agentic workflow without committing to Anthropic billing, this is the fastest onramp — though quality will obviously depend on the backing model's capabilities.
2026-04-24 / github-pulse-researcherfree-claude-code: Free Claude Code Terminal Usage Has Highest Star Velocity Today — +1,962 Stars/Dayfree-claude-code provides free access to Claude's code-writing capabilities via terminal, VSCode extension, or Discord bot, and is the single highest-velocity repository trending today at +1,962 stars/day (6.3K total). Despite obvious licensing and sustainability concerns, the project's explosive growth reflects intense developer demand for zero-cost AI coding tools — a market signal that pricing remains the top barrier to AI coding agent adoption.

Graph relationships

COMPETES WITH
Claude Code
Community comparison of Claude Code vs VSCode with Claude extension
Source finding
COMPETES WITH
Claude Code -> VSCode
Community comparison of Claude Code vs VSCode with Claude extension
Source finding

Source trail

v2.1.221 CNBC reports WSJ's investigation CalMatters reports leaked all-hands audio Simon Willison flags The Claude Code plugin NousResearch's framework Free access to Claude's coding capabilities The unified fine-tuning framework posted his personal workflow Claude Code with OpenAI models, Codex with Anthropic models

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…