Cursor Breach Exposes 5,000 Developers to Malicious Code Extension

A misplaced access key on a third-party AI provider's platform let attackers breach Cursor's system and expose 5,000 developers to malicious code through a tampered VS Code extension, according to reports on the incident. The attackers used the compromised key to inject unauthorized code into the Cursor VS Code extension marketplace.