✓ AI summary
Summary of reporting by Ars Technica • • 1 min read
4 Wire-neutral provisional

✓ No loaded language, vague sourcing, or framing detected.

Anthropic's VS Code Extension Compromised for Nearly 12 Hours

Anthropic's official VS Code extension was compromised for nearly 12 hours, affecting up to 5,000 developers. The malicious version was distributed through Anthropic's official account on Cursor, but the method of compromise remains unclear.

Companies
Anthropic Cursor Phorian
People
Kevin Beaumont Luke Roberts

Anthropic's Claude model extension for VS Code was compromised, impacting around 5,000 developers' machines. The malicious version, 2.1.313, was available for nearly 12 hours before being replaced by a safe version. The method of how attackers accessed the official account has not been disclosed by Anthropic or Cursor.

Key facts

  • Anthropic's VS Code extension was compromised for nearly 12 hours.
  • Up to 5,000 developers' machines were affected by the malicious version.
  • The compromised version was 2.1.313, which replaced version 2.1.312.
  • Anthropic released a safe version 2.1.314 shortly after the incident.
  • The method of account compromise has not been explained by Anthropic or Cursor.
Read the full story at Ars Technica

A short AI summary in our own words. The reporting belongs to Ars Technica; we don't reproduce it.

Annotating as

No note attached

on this article.

Original vs. Neutral

Original Headline

Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Neutral Headline

Anthropic's VS Code Extension Compromised for Nearly 12 Hours