Anthropic VS code extension on Cursor backdoored for nearly 12 hours

What happened: An official Anthropic Claude extension for Cursor was backdoored and distributed through Anthropic's official account on Cursor, affecting developer machines for nearly 12 hours. Anthropic has not warned customers. Key numbers: Malicious version 2.1.313 affected at most 5,000 users; Anthropic pushed version 2.1.314 several hours later. Why it matters: Researchers describe it as a supply-chain compromise in which attackers gained control of the official distribution channel. Neither Cursor nor Anthropic has explained how the account was taken over. Coverage: 3 outlets in 24h

An official Anthropic Claude extension for Cursor was backdoored and distributed through Anthropic's official account on Cursor, affecting developer machines for nearly 12 hours. Anthropic has not warned customers.

Researchers describe it as a supply-chain compromise in which attackers gained control of the official distribution channel. Neither Cursor nor Anthropic has explained how the account was taken over.