Cursor Breach Exposes 5,000 Developers

Cursor confirmed a security breach on October 29 where hackers stole credentials from Fireworks AI to distribute malicious Claude Code extensions. Up to 5,000 developers received malware containing SSH backdoors, while fewer than 0.05% of users had coding-agent traces exposed. The incident involved stolen API credentials that allowed unauthorized access to internal systems and customer data.