> Yesterday, Anthropic were compromised and Cursor extension used by tens of millions of developers for Claude access was delivering a remote access trojan via an SSH reverse backdoor
That's a bit hyperbolic: someone released a version of the Claude Code VS Code extension with a backdoor on the Cursor marketplace:
> a maliciously modified version of Anthropic’s Claude Code extension was made available in the Cursor VS Code extension Marketplace
https://cursor.com/blog/claude-code-extension-security-notic...
As the article says, version 2.1.313 was silently deleted from OpenVSX, Visual Studio Marketplace and Cursor.
There is more going on here. Cursor is covering for Anthropic because of the huge data center contract with SpaceX.
[flagged]