Tech

Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 30/10/2026, 22:58:23 UTC.

Briefings

A supply-chain compromise occurred where a malicious VS Code extension version 2.1.313 was backdoored into Anthropic's official Cursor distribution channel, affecting approximately 5,000 users. The attacker gained access to cloud credentials via the official distribution channel, allowing the malicious version to supersede the legitimate 2.1.312 version. Anthropic has not yet warned customers of the incident, and the specific method of credential theft remains unexplained.

Key points

• A malicious VS Code extension version 2.1.313 was backdoored into Anthropic's official Cursor distribution channel, affecting approximately 5,000 users.
• The attacker gained access to cloud credentials through the official distribution channel, allowing the malicious version to supersede the legitimate 2.1.312 version.

Context

This incident involves Anthropic's official extension distribution channel on Cursor, where a malicious version superseded the legitimate 2.1.312 version. The attack involved supply-chain compromise, and the attacker gained access to cloud credentials via the official distribution channel.

Limitations

Coverage is limited to the reported timeframe of the incident and the specific version numbers involved. The exact method of credential theft remains unexplained, and the specific impact on user data is not detailed in the available evidence.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 31/10/2026, 00:16:56 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeicj64n4rq5ddz2ila4daarvte57pkpbzocg22zzth7pulenl66mqm