Anthropic's verified Visual Studio Code extension on the Cursor marketplace was compromised with a backdoor for nearly 12 hours before detection. The method by which attackers gained access to Anthropic's verified publisher account remains unknown. The incident highlights supply chain risks in AI-assisted development tooling.