Anthropic VS Code Extension Backdoored on Cursor for Nearly 12 Hours

Anthropic's Visual Studio Code extension distributed through Cursor was compromised and used to deliver a backdoor for nearly 12 hours. The incident involved unauthorized access to Anthropic's verified Cursor account, though the specific method attackers used to gain control of that account remains unknown. The breach affected the extension's distribution channel and underscores potential supply-chain risks for widely used developer tools.