{"data":{"id":"5f797166-f530-489c-9840-bc1eb7faafc1","title":"Cursor Says Stolen Fireworks AI Key Led to Trojanized Claude Code Extension Incident","summary":"Cursor says an attacker used an access key it had issued to Fireworks AI, which Fireworks exposed in a breach, to copy data from a read-only storage bucket. The attacker then used credentials found in archived coding agent traces to reach SaaS tools, and on October 29, 2026 placed a trojanized Anthropic Claude Code extension in the cache serving Cursor's marketplace, where it was available for about 11 hours to at most 5,000 users. Cursor said versions 2.1.312 and 2.1.313 were affected.","solution":"Cursor deactivated the Fireworks key, revoked and rotated credentials, moved all inference traffic off Fireworks, cut off Fireworks' access to shared data sets, took the extension marketplace offline and removed the malicious build. It notified affected users and helped revoke exposed credentials.","labels":["security","industry"],"sourceUrl":"https://thehackernews.com/2026/11/stolen-fireworks-ai-key-led-to-cursor.html","publishedAt":"2026-11-15T08:22:04.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code","Cursor","Fireworks AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-15T08:22:04.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"]}}