An official Anthropic Claude extension for Cursor was backdoored for nearly 12 hours, hitting up to 5,000 developer mach...

An official Anthropic Claude extension for Cursor was backdoored for nearly 12 hours, hitting up to 5,000 developer machines. The malicious build tried to install a persistent SSH backdoor and harvest cloud credentials and API tokens. Cursor pulled it and rotated marketplace keys, but Anthropic has yet to warn customers. https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/ #AIagent #AI #GenAI #AISafety