“A backdoored version of Anthropic's VS Code extension on the Cursor platform was live for nearly 12 hours before being detected and removed. The attack exploited Anthropic's verified publisher account, though the exact method of access remains unknown. The incident highlights growing supply chain security risks as AI developer tools become high-value targets.”
Key Takeaways
- Anthropic's verified Cursor account was compromised, allowing attackers to distribute a backdoored VS Code extension for approximately 12 hours.
- The method by which attackers gained access to the verified publisher account has not yet been determined.
- The incident represents a software supply chain attack targeting an AI company's official developer tooling distribution channel.
Attackers compromised Anthropic's verified Cursor account, exposing users to malicious code for nearly half a day.
trending_upWhy It Matters
This attack demonstrates that verified publisher accounts on developer tool marketplaces are high-value targets, and a verification badge offers no guarantee of safety. Developers who automatically update extensions or installed the plugin during the 12-hour window may have been exposed to malicious code on their machines or CI/CD pipelines. As AI companies rapidly expand their developer tooling ecosystems, the attack surface for supply chain compromises grows accordingly. Expect increased scrutiny on how platforms like Cursor and VS Code Marketplace vet and monitor verified publisher accounts going forward.
FAQ
How did attackers backdoor an official, verified Anthropic extension?
Investigators have not yet determined how the attackers gained access to Anthropic's verified Cursor publisher account. The unknown access vector is one of the most concerning aspects of the incident, as it leaves open whether credentials were phished, leaked, or stolen via another method.
Am I affected if I use Anthropic's Cursor extension?
Users who downloaded or auto-updated the extension during the roughly 12-hour compromise window may have been exposed to malicious code. If you installed or updated the extension during that period, you should audit your system and rotate any credentials or API keys that may have been accessible.
What is a supply chain attack and why does it matter for AI tools?
A supply chain attack compromises software at the distribution level, meaning users are infected through a trusted, official source rather than a suspicious one. As AI developer tools proliferate and gain deep access to codebases and environments, they become increasingly attractive targets for this type of high-impact, broad-reach attack.
