Anthropic has launched an official, company-managed directory for Claude Code plugins on GitHub, giving developers a single vetted source for extensions while cautioning that even listed plugins may pull in unverified third-party software, per Tech Times. The repository went live May 22 and has gathered more than 20,000 stars. It splits plugins into two groups: extensions built internally, and third-party contributions from partners including GitHub, GitLab, Linear, and Asana. All submissions clear automated screening, while those passing a stricter human review earn an “Anthropic Verified” badge. The company states directly that community plugins may install software that could be malicious, and advises reviewing each plugin's source code first. Security researchers have documented attacks in which malicious Claude Code plugins redirected dependencies or executed ransomware.
