arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Anthropic’s official Claude extension for Cursor was replaced by malicious version 2.1.313 for nearly 12 hours, potentially affecting as many as 5,000 users. The compromised release sought to install a persistent SSH backdoor on Windows, macOS, and Linux; Anthropic had not issued a public customer notice when reported.
