Cursor Reveals How a Leaked Fireworks AI Key Led to a Backdoored Claude Code Extension
Cursor has traced its October security breach to an access key exposed by Fireworks AI. The attacker used that key to steal historical coding agent records, find more credentials, and eventually place backdoored Claude Code extensions in Cursor’s marketplace cache. Its November 13 update connects the vendor exposure to the malicious packages discovered on October […] The post Cursor Reveals How a Leaked Fireworks AI Key Led to a Backdoored Claude Code Extension appeared first on Cyber Security News .
Continue on Cyber Security News ↗ ‹ All news Get the newsletter
The summary and image come from Cyber Security News; the image is shown from their website.