/
affected_products:Cursor × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

safedep.io · medium

Cursor's VS Code import installs latest Open VSX extension versions, exposing agentic IDE users to supply chain risk

SafeDep research shows that Cursor's Import VS Code Configuration step copies only the publisher.extensionname of each installed extension and drops the version. Cursor then installs whatever version Open VSX (run by the Eclipse Foundation) calls latest, through its proxy marketplace.cursorapi.com. In SafeDep's test, three extensions pinn…

technology
infosecurity-magazine.com · medium

Aoki infostealer adds theft of AI coding assistant credentials, tokens and session files

Symantec's Threat Hunter Team reports that new versions of the Aoki infostealer now target credential and session files used by AI coding assistants. Earlier versions focused on browser, cryptocurrency wallet and password manager data. Aoki is a relatively new and sparsely documented stealer, first observed earlier in 2026, and its AI-rel…

technology software development