Cursor has traced its October security breach to an access key exposed by Fireworks AI. The attacker used that key to steal historical coding agent records, find more credentials, and eventually place backdoored Claude Code extensions in Cursor’s marketplace cache. Its November 13 update connects the vendor exposure to the malicious packages discovered on October […]
This article has been indexed from Cyber Security News
Read the original article:
Cursor Reveals How a Leaked Fireworks AI Key Led to a Backdoored Claude Code Extension