PulseAugur
EN
LIVE 02:34:59

Cursor marketplace targeted by malicious extension after Fireworks key leak

By PulseAugur Editorial · [1 sources] ·

Cursor experienced a security incident when an access key issued to Fireworks was exposed, leading to the leak of coding-agent traces. This compromised key was then used to publish a malicious Claude Code extension to Cursor's marketplace on October 29th. The leaked data primarily consists of traces from 2025, with some containing live credentials, and was not in Privacy Mode. AI

IMPACT Highlights potential supply chain risks in AI development tools and the need for robust security measures.

RANK_REASON The cluster describes a security incident affecting a specific AI-adjacent tool and its marketplace.

Read on Mastodon — mastodon.social →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Cursor marketplace targeted by malicious extension after Fireworks key leak

How we ranked this

Signal score
13 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
The cluster describes a security incident affecting a specific AI-adjacent tool and its marketplace.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    🤖 Cursor post-mortem: an access key it issued to Fireworks was exposed, leaking coding-agent traces (mostly 2025, non-Privacy-Mode) — some holding live credenti

    🤖 Cursor post-mortem: an access key it issued to Fireworks was exposed, leaking coding-agent traces (mostly 2025, non-Privacy-Mode) — some holding live credentials. Those were then used to publish a malicious Claude Code extension to Cursor's marketplace on Oct 29. 🔗 https:// cur…

    LINKS cursor.com/…/security-incident-update

RELATED ENTITIES

RELATED TOPICS