Cursor Breach Exposes 5,000 Developers to Malicious Code Extension

A misplaced access key on a third-party AI provider's platform let attackers breach Cursor's system and expose 5,000 developers to malicious code through a tampered VS Code extension, according to reports on the incident. The attackers used the compromised key to inject unauthorized code into the Cursor VS Code extension marketplace.

A single misplaced access key on a third-party AI provider's platform was all it took for hackers to breach Cursor's system, exposing 5,000 developers to malicious code via a tampered extension. The attackers used the compromised key to inject unauthorized code into the Cursor VS Code extension marketplace.