https://www.live-feeds.com/feed/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hoursContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hourshttps://www.live-feeds.com/feed/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours#u172012Tue, 03 Nov 2026 11:41:44 +0000A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, exposing developer devices to a persistent SSH backdoor and credential theft. Cursor stated that up to 5,000 users were affected across versions 2.1.312 and 2.1.313 for Windows and macOS. The compromised package was available for nearly 12 hours before being removed. Security researchers discovered the trojanized update, prompting Cursor to temporarily shut down its marketplace to pull the malicious package.Why it mattersSoftware development environments