Cursor Details Security Incident Involving a Leaked Key and a Malicious Extension

發生什麼事

@cursor_ai announced an update to its investigation. Cursor says an attacker obtained an access key it had issued to Fireworks, then copied material from a shared read-only storage bucket. The bucket held mostly coding-agent traces from 2025, along with a small number of credentials that had not been redacted.

On October 29, stolen credentials were used to place a modified Claude Code extension in a cache serving Cursor’s marketplace. Anthropic did not publish that copy. Cursor says the cached build was requested by no more than 5,000 users, who may have received the malicious version.