It's still unknown how attackers got access to Anthropic's verified Cursor account.
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
In short
A software tool managed under Anthropic's verified profile on the Cursor editor marketplace was modified to include malicious instructions. The corrupted extension stayed active and accessible to users for nearly half a day before the issue was addressed. Investigators are actively looking into the initial breach vector, as it remains entirely unknown how the perpetrators infiltrated the company's verified deployment account.
Key points
- Software marketplace credentials remain an attractive and vulnerable vector for unauthori…: Software marketplace credentials remain an attractive and vulnerable vector for unauthorized third-party code deployment.
- The incident highlights potential risks for developers relying on trusted platform extens…: The incident highlights potential risks for developers relying on trusted platform extensions during active workflows.
- Unresolved questions persist regarding the specific access methods utilized by the attack…: Unresolved questions persist regarding the specific access methods utilized by the attackers to deploy malicious files.