Anthropic’s official Claude VS Code extension on Cursor was backdoored for nearly 12 hours
🤖 AI-generated content — The title and summary were produced automatically by artificial intelligence, without human editorial review.
Attackers posted malicious version 2.1.313 of Anthropic’s official Claude VS Code extension through Anthropic’s verified Cursor account, replacing 2.1.312 in a supply-chain compromise that may have affected up to 5,000 users via Cursor’s default auto-updates. Anthropic shipped 2.1.314 several hours later but has not publicly warned customers or said how the account was taken over.
Continue in the app — vote & join in ➔Source: Ars Technica · via ahirlevel.hu