Anthropic's VS Code extension on Cursor was backdoored for nearly 12 hours

Attackers compromised Anthropic's verified Cursor account and pushed a backdoored version of its VS Code extension for close to 12 hours. How the account was accessed is still unknown.