Claude Code Extension Backdoor | AI Field Notes #128

AnalysisSome Proton employees will sit an interview between November 4 and 11 about how they use AI, and the notes feed a review that can affect their "continued employment", 404 Media reported on October 30. CEO Andy Yen of Proton, the Swiss maker of Proton Mail, has already put 40-plus senior leaders through it. Staff say the company installed software that tracks how much code AI writes, and CTO Bart Butler told a meeting that AI wrote 90% of it in October. In leaked messages, Yen wrote: "This will be the last year that we hire engineers." Proton says it is not cutting jobs and is still hiring.

AnalysisFor about 11 hours on October 29, developers who installed Claude Code inside Cursor (the AI code editor) could have pulled a copy that planted an attacker's SSH key on their machine. Versions 2.1.312 and 2.1.313 tried to open a reverse tunnel, sent home usernames, Git emails and IP addresses, and installed persistence disguised as a system service, according to Phorion, the security firm that caught it. Anthropic says it never built or published that copy and its own channels are clean. Cursor pulled it, shut its marketplace and rotated keys. Neither company has said how the file got there, which is the one answer every extension user needs.

AnalysisA month. That is how much longer workers pushed out of AI-exposed jobs since 2025 took to find new work than other laid-off workers, according to a Goldman Sachs note by economist Pierfrancesco Mei that Fortune covered on October 30. They were also about 10 percentage points more likely to still be unemployed a year later. Workers 35 and older took about five weeks longer to get back to full-time work, younger ones about three. No survey asks whether AI caused a layoff, so Goldman built a proxy from AI exposure and whether the role was eliminated. Its verdict: the scar matches past technology shocks.

AnalysisTwo years after Apple Intelligence launched in the US, Apple confirmed its first features will reach mainland China in December with iOS 27.3, after a developer beta from November 4. The model doing the work there is Alibaba's Qwen, running inside Writing Tools, Visual Intelligence and Siri, next to a China-only model Apple trained with Alibaba's help. China's internet regulator cleared the setup in July. Siri AI, the rebuilt assistant Apple showed at WWDC 2026, stays out, with no official reason given. The same iPhone now thinks with a different model depending on where it was sold.

Analysis"Maybe several hundred orders in total" is what third-party AI agents such as Muse and Instinct have placed on DoorDash, CEO Tony Xu said on the company's third-quarter earnings call, as TechCrunch reported on October 30. DoorDash completes about 3 million deliveries a day. It has built its own doors for agents anyway: a chatbot in June, a command-line ordering tool in July, a text-to-order agent in September, and an MCP connector (a standard plug that lets other chatbots place orders). Xu floated advertising inside agents someday. For now the agentic shopper is mostly a demo, and the app icon still does the work.

AnalysisInvestors have offered Cognition, the startup behind the Devin coding agent, a valuation of $70 billion to $80 billion, Business Insider reported this week. The last price, set in a Series E of more than $2 billion announced September 8, was $48 billion. Run-rate revenue went from $492 million in May to nearly $900 million by that round. The talks are early and terms may move. Even the low end would price Cognition at close to 80 times that revenue, a bet that companies will keep paying for coding agents by the seat or by the task after the novelty wears off.

AnalysisIf Nscale defaults on construction payments for its West Virginia campus, Nvidia would take over the site temporarily and find a new buyer or tenant, under a residual value guarantee the chipmaker is weighing, The Information reported on October 30. The first 460-megawatt building is already contracted to Anthropic for $44.6 billion, per Nscale's IPO filing, and is planned around Nvidia's Vera Rubin chips. Nscale had about 25,000 advanced chips running in August against plans for nearly 500,000. Nvidia has extended roughly $170 billion in investment and credit support to cloud customers, so more and more it finances the companies that buy its chips.

AnalysisBlackstone, the anchor investor in a $63 billion deal to finance chips for Anthropic (the AI lab behind Claude), now tells investors it expects Anthropic to get a double-B rating after its IPO, the top tier of junk, the Financial Times reported on October 30. Blackstone had earlier predicted investment grade before 2027. The worry is a year of giant compute contracts, which has made even friendly lenders nervous. A junk rating raises the interest on every future borrowing, and that cost has to be recovered somewhere, most plausibly in what customers pay per token. Both companies declined to comment.

AnalysisNearly one in five US workers in an SHL survey said they had been laid off or replaced by AI and then asked to return, CNBC reported on October 30. SHL, a workplace assessment firm, polled more than 1,000 US and 1,000 UK workers in June and July. The returners name a price. Almost half would want a significant raise, 43% written job-security guarantees, 40% full transparency on how AI would be used in their role, and 30% an apology from leadership. Ford and Amazon are among the companies that reversed AI cuts. Firing early is turning out to be the expensive way to learn what the people did.

AnalysisFans could pay an extra $4 to $5 a month on top of Premium to turn a folk song into a dance track, or hear one artist sing another's song, under an AI remix tool Spotify plans for early 2027, the Financial Times reported on October 30. Only artists who opt in would be available, even when their label has signed. Universal, Merlin, Kobalt and Believe have deals; Sony and Warner are still negotiating. Originals would earn a share of royalties, and remix plays would count toward their chart positions. The service that squeezed per-play payouts now wants fans to pay for the right to edit the catalogue.

AnalysisTwo months after TechCrunch reported its $7.5 million seed round led by Khosla Ventures, Ollie is closing. CEO Bill Lennon said on October 30 that the text-based family assistant, which read users' email and calendars to book appointments and pay bills, will shut on November 6. He blamed Muse, Instinct and other rivals for making it hard to stand out or raise more money. Ollie was one of the first mainstream assistants to pass a SOC 2 audit (an independent check of how a company handles data). Privacy was the pitch, and distribution won.

AnalysisLenders get rights over some of the equipment Amazon buys under a new facility that lets it borrow up to $80 billion against that hardware from early 2027 through the third quarter of 2028, disclosed in its quarterly filing after results on October 29. Amazon's free cash flow was negative $42.4 billion over the 12 months to September, and its spending commitments reached $883 billion, more than double a year earlier. AWS chief Matt Garman described it as funding the opportunity "responsibly". The company with the biggest cloud business is now pawning GPUs to buy more GPUs.

AnalysisA text model that fits in about 1GB of memory at 4-bit precision scored 38.4 on WebArena-Verified (a test of agents completing tasks on real websites), ahead of 28.9 for Alibaba's much larger Qwen3.5-9B, by Liquid AI's own count. LFM3, released October 27 by the small-model startup, is six compact models covering text, vision, speech and structured decisions, with hosted text pricing at $0.08 per million input tokens. Weights are on Hugging Face, though companies above $10 million in revenue need a separate commercial license. Liquid concedes bigger models still win at coding and knowledge. The pitch is narrower: browser chores on a device you already own.