PulseAugur
EN
LIVE 02:47:36

Cursor security breach involved leaked key, poisoned extension

By PulseAugur Editorial · [1 sources] ·

A security incident at Cursor, a coding-focused AI application, has been detailed, revealing a complex attack chain that began with a leaked vendor key. An attacker exploited this key to access Cursor's data shared with its inference vendor, Fireworks, leading to the exposure of limited user credentials and non-production source code. The attacker then used stolen credentials to inject a malicious, unauthorized version of Anthropic's Claude Code extension into Cursor's VS Code extension marketplace, potentially affecting up to 5,000 users over an 11-hour period before being removed. AI

IMPACT This incident highlights supply chain vulnerabilities in AI tools, emphasizing the need for robust security practices beyond core model development.

RANK_REASON The item details a security incident affecting a specific AI-adjacent tool, Cursor, and its integration with an AI model's extension.

Read on dev.to — Claude Code tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Cursor security breach involved leaked key, poisoned extension

How we ranked this

Signal score
46 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
The item details a security incident affecting a specific AI-adjacent tool, Cursor, and its integration with an AI model's extension.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — Claude Code tag TIER_1 English(EN) · Tiến Thành bình ·

    Cursor's Security Incident, Explained: A Leaked Vendor Key, a Poisoned Extension, and 5,000 Users at Risk

    <p>On November 13, Cursor published the full investigation into a security incident it first disclosed on October 29: a malicious, unauthorized copy of Anthropic's Claude Code extension had appeared in the Cursor VS Code extension marketplace. The post is worth reading in full, b…

RELATED ENTITIES

RELATED TOPICS