Comment by felixrieseberg

21 hours ago

Felix from Anthropic here.

We’re working with Cursor on this incident, but it wasn’t a compromise of Anthropic’s systems or employee laptops. A malicious actor used access to Cursor’s marketplace to publish a tampered copy of the Claude Code extension, which we didn’t build or publish. The versions on our official channels are not affected and this only impacts Cursor users.

> A malicious actor used access to Cursor’s marketplace

How did they get access to this?

  • Ask Cursor team?

    • Let's say Anthropic has been impersonated and they are not at fault. I'd expect Cursor to provide information to them about this, and Anthropic being able to comment.

      Btw, if you got any insights, you are more than welcome to share.