Cursor: A Fireworks Key Exposes Claude Code

Key Takeaways

1The official Claude Code extension from Anthropic on Cursor has been compromised

2An access key issued to Fireworks AI was exposed after a data breach

3This key allowed an attacker to copy read-only data

Why it matters : The incident highlights how a vulnerability at a third-party provider can compromise the security of a larger ecosystem.

A backdoor associated with Fireworks AI was used to target the Cursor ecosystem. The official Claude Code extension from Anthropic was compromised, and data was copied from a read-only source, according to Cursor.

Copied Data and Compromised Claude Code Extension

The official Claude Code extension from Anthropic on the Cursor extension marketplace has been compromised. Cursor specifies that an attacker used an access key to copy data from a read-only source.

Le brief IA que lisent les pros

Le brief IA que les pros lisent chaque soir

Les 7 actus IA du jour, décryptées en 5 min. Gratuit.

Inclus dès l'inscription : notre sélection des meilleurs guides & comparatifs IA.

Choisissez votre rythme

Gratuit · Pas de spam · Désabonnement en 1 clic

Key Exposed After Attack Targeting Fireworks AI

A data breach targeted Fireworks AI. The access key was exposed as a result of this incident, allowing the key to be stolen and leading to the compromise of the Claude Code extension.

Cursor Attributes the Leak to a Key Issued to Fireworks

Cursor indicates that an attacker obtained an access key that the platform had issued to Fireworks. The company adds that this key had been exposed by Fireworks and that it was a token issued by Cursor for that purpose.

Brief IA — L'actualité IA en français

L'essentiel de l'actualité de l'intelligence artificielle, décrypté et expliqué chaque jour.

Voir toutes les actus IA →