2026年11月15日 3:22 ET 发布 · 更新于 3 小时前 · 1 个来源

Stolen Fireworks AI Key Led to Cursor Data Breach and Trojanized Claude Code Extension

The Hacker News
The Hacker News
·
原始报道
INFERY
Stolen Fireworks AI Key Led to Cursor Data Breach and Trojanized Claude Code Extension

The compromise of Anthropic's official Claude Code extension on Cursor's extension marketplace was the result of the theft of an access key that was exposed in the wake of a breach targeting Fireworks AI. "An attacker obtained an access key we had issued to Fireworks," Cursor said in a Friday update. "The key was exposed by Fireworks, and the attacker used it to copy data from a read-only

原文