Cursor Discloses Supply Chain Attack Affecting ~5,000 Users on November 14

Cursor disclosed a supply chain attack on November 14, revealing that approximately 5,000 users were affected by compromised versions of the Claude Code extension (versions 2.1.312 and 2.1.313) distributed between October 29 and October 30. According to the incident report, attackers exploited exposed API credentials to infiltrate Cursor systems and injected SSH backdoors into the extension's distribution cache for macOS and Windows systems. GoPlus advised affected users to apply the official remediation script immediately.
Disclaimer: This content is for informational purposes only and does not constitute investment advice or encourage the buying or selling of crypto assets. It is intended to provide information about industry developments and is not directly related to the services offered by Gate TR. Although information obtained from third-party sources has been carefully reviewed, Gate TR assumes no responsibility for any errors or omissions. Crypto assets involve high risks and may experience significant price fluctuations. Before making any investment decisions, you should assess your financial situation and risk tolerance, conduct your own research, and make decisions independently.