Cursor Estimates Up to 5,000 Users Affected by Malicious Marketplace Extension

A malicious version of the Claude Code extension potentially reached 5,000 users through a security failure in the Cursor AI coding assistant marketplace. Cursor advised affected teams to rotate credentials and audit systems for backdoors. Cybercriminals also stole internal credentials from Fireworks AI in October, which led to the theft of driver's license details for at least 7,870 drivers in Rhode Island, South Carolina, and Massachusetts.