Attackers posted malicious version 2.1.313 of Anthropic’s official Claude VS Code extension through Anthropic’s verified Cursor account, replacing 2.1.312 in a supply-chain compromise that may have affected up to 5,000 users via Cursor’s default auto-updates. Anthropic shipped 2.1.314 several hours