You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.280,
ImprovementsSection of the release
What
When adding or reconciling a plugin marketplace, Claude Code now checks its name against the reserved name anthropic-plugin-directory, and also checks for spoofed variants that use lookalike characters or normalization tricks (via NFKC normalization and stripping of zero-width characters). Marketplaces that match or spoof a reserved name are refused with an explicit error.
Why
This prevents a malicious plugin marketplace from disguising itself as the official Anthropic plugin directory using visually similar names, protecting users from being tricked into trusting a fake marketplace.
