That's unlikely because Cursor (and VS Code) enforce a 12h delay for all extension updates by default. Malicious extension was only live for 11h so you shouldn't be affected unless you reduced it.

In any case running an agent framework in anything but a strict environment like openshell or a VM with a non rooted container and with a firewall out side of that containment is the definition of stupidity.

Recency bias. I don’t see much evidence that the two things are related other than the coincidental timing.

https://en.wikipedia.org/wiki/Recency_bias?wprov=sfti1

The supply chain attack had a software bug which raised error messages that were discovered by a security vendor. I don't think those people have the skills needed to elevate their initial access to a full binance compromise within a few hours.

Isn't the anthropic hack a day late?