Third-party dispatches, not graded receipts
Anthropic's Claude Code extension on Cursor backdoored for nearly 12 hours
A malicious version of the Claude Code extension appeared on Cursor's marketplace for nearly 12 hours, potentially affecting around 5,000 users. The extension collected hostname, username, OS, home directory path, and public IP address.
“It’s still unknown how attackers got access to Anthropic’s verified Cursor account.”