# Anthropic VS Code extension backdoored on Cursor for nearly 12 hours

https://mins.news/en/item/123199

- Ars Technica, 2026-10-30 21:09 UTC
- Tech
- Original: https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/

> Multiple sources said a malicious version of Anthropic’s official Claude extension on Cursor’s marketplace may have affected up to 5,000 developers. Anthropic released a corrected version several hours later, but has not explained how attackers took over its official account or warned customers.

## Related coverage

- [Cursor urges credential resets after malicious Claude Code marketplace update](https://mins.news/en/item/124624) — CryptoSlate, 2026-11-01
- [Cursor says tampered Claude Code extension affected up to 5,000 users](https://mins.news/en/item/122140) — Reuters, 2026-10-30
