Claude Code's Vercel Plugin Quietly Collected Bash Commands — A Developer Used Claude to Expose It
A developer investigating unexpected behavior from a Vercel plugin installed alongside Claude Code has uncovered what appears to be undisclosed data collection — including bash command strings and session-level data — occurring in projects that have nothing to do with Vercel. The findings, reported by TechRadar, were themselves discovered using Claude as an investigation tool, creating a notable meta-story: Claude was used to expose privacy concerns in a plugin bundled with Claude Code. ...