Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Summary
Anthropic's VS Code extension on Cursor was compromised and effectively backdoored for almost 12 hours. It remains unclear how attackers gained access to the verified Cursor account used to distribute the extension.
IFF Assessment
FOE
The compromise of a popular development tool extension represents a direct threat to developers and their systems, allowing potential malicious code to be introduced.
Defender Context
This incident highlights the critical need for robust supply chain security and vigilant monitoring of developer tools. Defenders should be aware of potential compromises in code editors and extensions, as these can serve as vectors for sophisticated attacks.