{
  "id": 20152282,
  "title": "Stolen Fireworks AI Key Led to Cursor Data Breach and Trojanized Claude Code Extension",
  "url": "https://urgent.news/2026/11/15/stolen-fireworks-ai-key-led-to-cursor-data-breach-and-trojanized",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-15T08:22:04.000Z",
  "source": {
    "name": "The Hacker News",
    "slug": "the-hacker-news",
    "url": "https://thehackernews.com/2026/11/stolen-fireworks-ai-key-led-to-cursor.html"
  },
  "original_language": "en",
  "account": "Anthropic's official Claude Code extension for Cursor's marketplace was compromised due to the theft of an access key from Fireworks AI. Cursor revealed that the key was exposed in a recent breach and was used by an attacker to steal data from a read-only storage bucket used to share information with Fireworks. This disclosure follows a trojanized version of Anthropic's Claude Code extension that was distributed through Cursor Marketplace, attempting to install a persistent SSH backdoor on affected systems. The read-only storage bucket contained coding agent traces from sessions not in Privacy Mode, which allowed users to opt out of data usage for training. Most of these sessions dated back to 2025 and contained credentials that were not removed, exposing API credentials of less than 0.01% of Cursor's customers. The attacker utilized these credentials to access Cursor's SaaS tools and subsequently placed trojanized versions of Anthropic's Claude Code extension on Cursor's cache, potentially reaching around 5,000 users for about 11 hours. Cursor took immediate action, deactivating Fireworks' key, revoking and rotating credentials, and investigating further access. No additional malicious activity has been detected since November 1, 2026. Cursor emphasized that Privacy Mode users, customer code repositories, internal production environment, app, and other extensions were unaffected. The incident comes after Uber reported a breach that exposed thousands of drivers' license information after internal credentials were stolen.",
  "summary": "The compromise of Anthropic's official Claude Code extension on Cursor's extension marketplace was the result of the theft of an access key that was exposed in the wake of a breach targeting Fireworks AI. \"An attacker obtained an access key we had issued to Fireworks,\" Cursor said in a Friday update. \"The key was exposed by Fireworks, and the attacker used it to copy data from a read-only",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}