Cursor confirms security breach led to malicious Claude Code extension

Cursor confirmed that attackers stole a credential from Fireworks AI, accessed Cursor internal systems and customer data, and distributed malicious versions of Anthropic’s Claude Code extension through Cursor’s marketplace on October 29. Up to 5,000 developers may have received an extension that attempted to install persistent SSH backdoors.