Anthropic VS Code Extension on Cursor Backdoored for Nearly 12 Hours

Anthropic's verified VS Code extension on the Cursor editor was compromised with a backdoor for nearly 12 hours. The breach occurred due to an unauthorized intrusion into their verified account. This incident highlights severe software supply chain vulnerabilities within developer environments and AI coding tools. A compromised extension on popular platforms poses major security risks to source code and workspace privacy. While the extension was backdoored for nearly half a day, the exact vector and method by which attackers gained access to Anthropic's verified account remain unknown. The incident directly impacts users relying on the Cursor editor and Anthropic's tools.