{"data":{"id":"db4f4605-7278-4b31-8e65-de2b267c7780","title":"Cursor confirms security breach led to malicious Claude Code extension","summary":"Cursor confirmed a security breach in which attackers stole an access key from Fireworks AI and used it to reach Cursor's internal systems and customer data. On October 29, the attackers used a stolen credential to publish malicious copies of Anthropic's Claude Code extension on Cursor's VS Code extension marketplace, where they stayed available for about 11 hours. The malware attempted to install persistent SSH backdoors, exposing up to 5,000 developers.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.bleepingcomputer.com/news/security/cursor-confirms-security-breach-led-to-malicious-claude-code-extension/","publishedAt":"2026-11-14T17:27:25.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain","data_extraction"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Cursor","Fireworks AI","Claude Code","Anthropic"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-14T17:27:25.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"]}}