RICHTVX NEWS logoRICHTVXNEWS
Cursor confirms security breach led to malicious Claude Code extension
◉ BLEEPINGCOMPUTER · CYBERSECURITY · RT-403E4B

Cursor confirms security breach led to malicious Claude Code extension

⌖ BLEEPINGCOMPUTER⏱ ✓ SOURCE · bleepingcomputer.com/news/securit…SHA-256 C8FD7CD4·2E1FEA6D

BLEEPINGCOMPUTER — Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI. [...]

CODE
RT-403E4B
PUBLISHER
BleepingComputer
TOPIC
Cybersecurity
PUBLISHED
14 November 2026 · 17:27 UTC
FIRST SEEN
14 November 2026 · 17:30 UTC
ORIGINAL
https://www.bleepingcomputer.com/news/security/cursor-confirms-security-breach-led-to-malicious-claude-code-extension/
SHA-256
c8fd7cd42e1fea6d515063e4a4f9141545ffcbd10c749726f08b98ff30868be9

The fingerprint is the SHA-256 of the original link, the headline and the publication time joined by “|”. Anyone can recompute it to confirm the headline and link were not changed here.

Headline and short excerpt from BleepingComputer, taken from its public news feed. The full story and its photos belong to BleepingComputer — read it at the original. RICHTVX NEWS is an independent aggregator and is not affiliated with BleepingComputer. Corrections: legal@richtvx.news.

More from BLEEPINGCOMPUTER

← Back to the news · The archive

GUARDED BY CERBERUSSCANNED BY WIREKNOX GUARD★ ADD AS A PREFERRED SOURCE ON GOOGLE