United StatesA backdoored Claude extension reached at most 5,000 developers.
Anthropic has not warned customers, and neither company has said how attackers took the account.
Cursor extensions run with the editor’s permissions, so version 2.1.313 tried to open a secure-shell tunnel and beacon host details.
Cursor says coding errors made the tunnel step fail unless the editor ran with administrator privileges.
Anyone who installed or updated it from Cursor between 5:27 am and 4:35 pm ET Thursday is affected.
How each outlet framed it
- Ars Technica leans critical
- traces the compromise to Anthropic's verified Cursor account, with Phorian's CTO framing it as a supply-chain attack on the official channel
Sources: Ars Technica