From Dev.to
Cursor's breach chain started in plain-text agent traces: 23,276 public repos carry the same leak
Cursor published its final incident report on November 13, two weeks after a malicious copy of Anthropic's Claude Code extension appeared in its VS Code extension marketplace. I read the whole thing....