My guess is someone published an extension on vscode/cursor claiming to be Anthropic when it wasn't. Kind of like me publishing an app called Youtube on the app store, being accepted by Apple and having people download my malicious app called Youtube.
There's been too much guessing already. Anthropic employees answered in this thread almost 4h before your response.