Stolen Fireworks AI credentials used to push a malicious Claude Code extension on Cursor (2026)
Cursor said attackers used credentials stolen from its AI provider Fireworks AI to slip a tampered Claude Code extension into its marketplace cache for about 11 hours.
- Victim
- Cursor