Incident

Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Why it matters: A malicious version of Anthropic's Claude extension was published to the Cursor marketplace and reached up to 5,000 users; developers should check for version 2.1.313 and remove it.

Covered by 2 outlets

  • Ars Technica - Anthropic VS code extension on Cursor backdoored for nearly 12 hours ()
  • The Register - Anthropic: That Claude Code extension compromise… couldn't be us ()

Published

Start with real signal

See your security surface before you subscribe.

Run the complete AYAsec workflow on Free, then move to the cadence your team needs.

Start scanning free