AIBuzzHub
Signal Brief
Home/Events/Anthropic Claude VS Code Extension Backdoored for Nearly 12 Hours

Anthropic Claude VS Code Extension Backdoored for Nearly 12 Hours

Developing
Confidence
50%
Impact: 70%
Updated 1m ago

Consensus Brief

Anthropic's official VS Code extension for its Claude model was compromised, affecting up to 5,000 developers' machines. The malicious version, 2.1.313, was available for download on Cursor's marketplace for nearly 12 hours before being removed. Anthropic has not yet issued a public warning regarding the incident.

Sourced from
Ars TechnicaT2Ars TechnicaT2Ars TechnicaT2Ars TechnicaT2+7 more
Primary: Ars Technica

What Changed Since Last Update

1m ago

New corroborating source added: Ars Technica published an update on Fri, 30 Oc ("Anthropic VS code extension on Cursor backdoored for nearly 12 hours").

Claim Ledger

4 claims tracked across sources

Confirmed Fact

The malicious version 2.1.313 affected at most 5,000 users.

Confirmed Fact

Cursor personnel worked with the cloud provider to block infected devices from reaching the server.

Confirmed Fact

Anthropic has yet to issue public notice of the incident to customers.

Confirmed Fact

The backdoored extension attempts to install a persistent SSH backdoor.

Role-Based Impact Analysis

Source Timeline

8 sources corroborating

Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Ars Technica·1h ago
T2
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Ars Technica·1h ago
T2
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Ars Technica·1h ago
T2
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Ars Technica·1h ago
T2
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Ars Technica·1h ago
T2
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Ars Technica·1h ago
T2
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Ars Technica·1h ago
T2
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Ars Technica·1h ago