Skip to main content
SecurityTools

Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Source: Ars Technica (opens in a new tab) · Dan Goodin

Intel Summary

Ars Technica reports that Anthropic's VS Code extension on the Cursor platform was backdoored for nearly 12 hours. It is currently unknown how attackers compromised Anthropic's verified Cursor account to deploy the malicious extension.

Why It Matters

A backdoored extension from a verified account exposes developer environments to software supply chain compromise. Teams utilizing Cursor with Anthropic's verified extension face potential risk until exposure scope and remediation details are confirmed.

Organizations & Entities