Cursor Says Fireworks AI Leak Exposed Key Behind Extension Attack

Cursor says a Fireworks AI-exposed key let an attacker copy agent traces, steal embedded credentials, and serve malicious extensions to up to 5,000 users.