Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Anthropic's official Claude VS Code extension on Cursor was backdoored, with malicious version 2.1.313 affecting at most 5,000 users before version 2.1.314 was pushed several hours later, according to researcher Kevin Beaumont. Phorion's CTO said the attacker gained access to Anthropic's official distribution account, and neither Cursor nor Anthropic has explained how. Anthropic has so far not warned customers of the incident.