Anthropic VS Code extension backdoored on Cursor
Where it stands: Attackers backdoored Anthropic's VS Code extension as distributed on Cursor for nearly 12 hours before the compromise was caught. It is still unknown how they gained access to Anthropic's verified Cursor account. Watch for details on the access method, what the backdoored build did, guidance for anyone who installed it during the exposure, and Cursor's response.
Latest
- 2026-10-31 (Ars Technica — arstechnica.com/security): attackers backdoored Anthropic's VS Code extension as distributed on Cursor for nearly 12 hours before the compromise was caught; it is still unknown how they gained access to Anthropic's verified Cursor account. Watch: the access method, what the backdoored build did, user guidance for anyone who installed it during the exposure, and Cursor's response.