Ars Technica reports that Anthropic's VS Code extension on Cursor was backdoored for nearly 12 hours, and it is still unknown how attackers got access to Anthropic's verified Cursor account. Ars Technica
Ars TechnicaAnthropic VS code extension on Cursor backdoored for nearly 12 hoursIt's still unknown how attackers got access to Anthropic's verified Cursor account.
How much should developers trust a "verified" publisher badge on extension marketplaces?