Ars Technica reports that a VS Code extension published under Anthropic's name on Cursor was backdoored for nearly 12 hours.
It is still unknown how the attackers got access to Anthropic's verified Cursor account, according to the report.
Source: arstechnica.com, reported 10-30. https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/