# Anthropic VS Code Extension on Cursor Backdoored for Nearly 12 Hours

> **Platform:** [SPIDITS AI](https://spidits.com/) — Real-Time AI News & Market Intelligence  
> **Published:** 2026-10-30T21:09:54.000Z  
> **Category:** PRODUCT_LAUNCH  
> **Impact Score:** 90/100  
> **Primary Source:** [Ars Technica](https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours)  
> **Canonical Citation:** [https://spidits.com/timeline/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours](https://spidits.com/timeline/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours)

## Executive Summary
It's still unknown how attackers got access to Anthropic's verified Cursor account.

## Why It Matters (Strategic Analysis)
The supply-chain compromise demonstrates how threat actors can leverage verified vendor accounts within specialized AI developer tool marketplaces to gain autonomous code execution and harvest cloud credentials directly from developer environments. This incident highlights the inherent trust risks tied to default auto-update configurations in developer IDE extensions.

## Key Entities & Companies
- **Anthropic**
- **Cursor**

## Referenced Coverage & Sources
- **[Ars Technica](https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours)**: Anthropic VS code extension on Cursor backdoored for nearly 12 hours — _It's still unknown how attackers got access to Anthropic's verified Cursor account._

---
*Synthesized by SPIDITS AI Market Intelligence Desk. Track live AI news, model releases, and funding: [https://spidits.com](https://spidits.com)*