Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Covered by 2 sources
Read the full articleA malicious version of Anthropic's official Claude VS Code extension was distributed via Cursor's marketplace, potentially compromising up to 5,000 developers' machines by installing a persistent SSH backdoor. The compromised version was live for nearly 12 hours before being replaced, and neither Anthropic nor Cursor has explained how the breach occurred or warned users publicly.
