Digital Event Horizon
Anthropic VS Code Extension Compromise: A Supply-Chain Attack Exposes Thousands of Developers' Machines
Thousands of developers were left vulnerable to a malicious attack due to a supply-chain compromise of Anthropic's VS Code extension. The compromised extension, version 2.1.313, was designed to install a persistent SSH backdoor and collect sensitive information from affected machines. The attack was a supply-chain compromise, where the attacker gained access to the official distribution channel. Anyone who installed or updated the Anthropic VS Code extension from Cursor between a certain time period may be affected. Neither Anthropic nor Cursor has publicly acknowledged the incident, despite the significant threat it poses. The incident highlights the importance of security awareness, software updates, and supply chain security.
A recent security incident has left thousands of developers vulnerable to a malicious attack on their machines, thanks to a supply-chain compromise of Anthropic's VS Code extension, available on the Cursor marketplace. The compromised extension, version 2.1.313, was posted to the official Anthropic account on Cursor, and despite the company's efforts to remove it, it had already been downloaded and installed by numerous users.
According to independent researcher Kevin Beaumont and security firm Phorian, the malicious extension was designed to install a persistent SSH backdoor on affected machines, allowing attackers to collect host and user information, including login credentials, and even attempt to add an attacker-controlled SSH key to the authorized_keys file. The backdoor was also designed to open a reverse SSH tunnel, potentially allowing attackers to access the compromised machine remotely.
The compromised extension was discovered by Phorian, who stated that the attack was a supply-chain compromise, where the attacker gained access to the official distribution channel. The malicious code was written to work on Windows, macOS, and Linux, and was designed to exploit the auto-update feature of Cursor extensions, which run with the permissions of the Integrated Development Environment.
As a result, anyone who installed or updated the Anthropic VS Code extension from Cursor between 5:27 am ET and 4:35 pm on Thursday should consider themselves affected, although it may be wise for anyone who has recently done so to also consider themselves potentially infected. The new version published by Anthropic does not clear the infection if the device was compromised, so simply running the safe version does not mean that the user is in the clear.
Anthropic has yet to issue a public notice of the incident to its customers, despite the significant threat posed by the compromised extension. Cursor has also remained tight-lipped about the incident, and neither company has explained how the attackers gained control of the Anthropic account.
The incident highlights the importance of security awareness and the need for developers to regularly update their software and tools to ensure they are protected against the latest threats. It also underscores the need for companies to take proactive steps to secure their supply chains and prevent similar attacks in the future.
In response to the incident, Cursor has shut down the VSCode Marketplace to rotate keys, audit access controls, and confirm no other extensions were compromised. The company has also removed the backdoored version from the marketplace and blocked further distribution.
Despite the coding flaws in the malicious code, which prevented the backdoor from working in some cases, Phorian stated that the malware is still a significant threat that installs persistence and beacons host reconnaissance back to the operator.
The incident serves as a stark reminder of the importance of vigilance and proactive security measures in the face of increasingly sophisticated threats. As the threat landscape continues to evolve, it is essential for developers and companies to stay informed and take steps to protect themselves against the latest attacks.
Related Information:
https://www.digitaleventhorizon.com/articles/Anthropic-VS-Code-Extension-Compromise-A-Supply-Chain-Attack-Exposes-Thousands-of-Developers-Machines-deh.shtml
https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/
Published: Fri Oct 30 18:11:48 2026 by llama3.2 3B Q4_K_M
