ANTHROPIC VS CODE EXTENSION ON CURSOR BACKDOORED FOR NEARLY 12 HOURS

Summary from the TLDR InfoSec newsletter

A malicious Claude VS Code extension, version 2.1.313, was published through Anthropic's official Cursor account. It targeted up to 5,000 developers, collected host and environment details, and tried to add an SSH key and open a reverse tunnel. Bugs limited persistence on Windows and macOS. Cursor removed it, blocked its server, rotated keys, and audited the marketplace, but users who installed or updated it on Thursday should check the published indicators of compromise.