{
 "tag": "cursor",
 "name": "Cursor",
 "group": "Other",
 "incidents": [
  {
   "slug": "trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026",
   "title": "TrapDoor packages on npm, PyPI and Crates.io steal wallet data and plant hidden prompts for AI coding tools",
   "url": "https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026",
   "json": "https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The packages planted .cursorrules and CLAUDE.md files with hidden Unicode instructions meant to trick AI coding assistants into running steps that could find and exfiltrate secrets."
   },
   "chains": [
    "multi-evm"
   ],
   "method": "supply-chain",
   "product": "Developers installing packages from npm, PyPI and Crates.io",
   "tags": [
    "multi-evm",
    "supply-chain",
    "trapdoor",
    "npm",
    "pypi",
    "crates-io",
    "ai-coding-agent",
    "cursor",
    "claude-code",
    "hidden-unicode",
    "infostealer",
    "ai"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2026-05-26",
   "closedAt": "2026-05-26",
   "updatedAt": "2026-05-26T12:00:00Z",
   "summary": "Socket reported in late May 2026 a campaign it named TrapDoor: more than 34 malicious packages and 384+ related versions across npm, PyPI and Crates.io that steal crypto wallet data and other developer secrets. The packages also tried to alter files that AI coding tools read, such as .cursorrules and CLAUDE.md, using hidden Unicode instructions meant to get the assistant to run scan-like steps that find and send out secrets. No confirmed losses or victim counts have been published. Developers who installed flagged packages should rotate credentials and move wallet funds."
  },
  {
   "slug": "cursor-contractshark-solidity-extension-dev-key-theft-aug-2025",
   "title": "Malicious 'contractshark.solidity-lang' Cursor extension steals an Ethereum core developer's private key",
   "url": "https://drains.watch/i/cursor-contractshark-solidity-extension-dev-key-theft-aug-2025",
   "json": "https://drains.watch/i/cursor-contractshark-solidity-extension-dev-key-theft-aug-2025.json",
   "status": "closed",
   "severity": "medium",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The key-stealing extension was installed in Cursor, the AI code editor the developer used as a coding assistant; it read the .env file rather than abusing the AI itself."
   },
   "chains": [
    "ethereum"
   ],
   "method": "supply-chain",
   "product": "Cursor AI code editor users",
   "tags": [
    "ethereum",
    "supply-chain",
    "cursor",
    "ai-code-editor",
    "malicious-extension",
    "solidity",
    "env-file",
    "private-key",
    "developers",
    "ai"
   ],
   "amountUsd": null,
   "victims": 1,
   "startedAt": "2025-08-13",
   "closedAt": "2025-08-13",
   "updatedAt": "2025-08-13T12:00:00Z",
   "summary": "Cointelegraph reported on 13 August 2025 that an Ethereum core developer's hot wallet was drained after he installed 'contractshark.solidity-lang', a fake Solidity extension for the Cursor AI code editor with over 54,000 downloads. The extension read his .env file and sent the private key to the attacker, who waited three days before emptying the wallet. The loss was a few hundred dollars because he kept only test funds there and his main holdings on hardware wallets. Keep keys out of .env files on development machines and use small, separate test wallets."
  },
  {
   "slug": "cursor-fake-solidity-extension-500k-crypto-theft-jul-2025",
   "title": "Fake Solidity extension for the Cursor AI code editor leads to about $500K crypto theft from a developer",
   "url": "https://drains.watch/i/cursor-fake-solidity-extension-500k-crypto-theft-jul-2025",
   "json": "https://drains.watch/i/cursor-fake-solidity-extension-500k-crypto-theft-jul-2025.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The malicious extension reached the victim through the extension marketplace used by Cursor, an AI-powered code editor; the AI features themselves were not exploited."
   },
   "chains": [
    "multi-evm"
   ],
   "method": "supply-chain",
   "product": "Cursor AI code editor users (Open VSX extensions)",
   "tags": [
    "multi-evm",
    "supply-chain",
    "cursor",
    "ai-code-editor",
    "open-vsx",
    "malicious-extension",
    "solidity",
    "screenconnect",
    "quasar",
    "infostealer",
    "developers",
    "ai"
   ],
   "amountUsd": 500000,
   "victims": 1,
   "startedAt": "2025-07-10",
   "closedAt": "2025-07-10",
   "updatedAt": "2025-07-10T12:00:00Z",
   "summary": "Kaspersky reported on 10 July 2025 that a blockchain developer lost about $500,000 in crypto after installing a fake Solidity extension in Cursor, an AI code editor built on VS Code that gets extensions from the Open VSX registry. The extension gave no Solidity support; it installed ScreenConnect remote-access software, then the Quasar backdoor and a stealer that took browser, email and wallet data, including seed phrases. The attackers used the seed phrases to drain the developer's wallets. Developers should vet editor extensions and never keep seed phrases or funded keys on a coding machine."
  }
 ],
 "changes": [
  {
   "incident": "trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026",
   "incidentTitle": "TrapDoor packages on npm, PyPI and Crates.io steal wallet data and plant hidden prompts for AI coding tools",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-26",
   "title": "CSO Online reported Socket's TrapDoor findings: 34+ malicious packages across three registries that steal wallet data and poison AI assistant config files.",
   "sourceUrl": "https://www.csoonline.com/article/4177019/trapdoor-malware-campaign-puts-developer-workstations-in-ciso-spotlight.html",
   "url": "https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026"
  },
  {
   "incident": "cursor-contractshark-solidity-extension-dev-key-theft-aug-2025",
   "incidentTitle": "Malicious 'contractshark.solidity-lang' Cursor extension steals an Ethereum core developer's private key",
   "severity": "medium",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2025-08-13",
   "title": "Cointelegraph reported that a malicious Cursor extension had taken an Ethereum core developer's private key and the hot wallet was drained the previous Sunday.",
   "sourceUrl": "https://cointelegraph.com/news/core-ethereum-devs-crypto-wallet-drained-ai-extension",
   "url": "https://drains.watch/i/cursor-contractshark-solidity-extension-dev-key-theft-aug-2025"
  },
  {
   "incident": "cursor-fake-solidity-extension-500k-crypto-theft-jul-2025",
   "incidentTitle": "Fake Solidity extension for the Cursor AI code editor leads to about $500K crypto theft from a developer",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2025-07-10",
   "title": "Kaspersky disclosed that a fake Solidity extension aimed at Cursor users led to about $500,000 in stolen crypto from a blockchain developer.",
   "sourceUrl": "https://www.kaspersky.com/about/press-releases/kaspersky-uncovers-500k-crypto-heist-through-malicious-packages-targeting-cursor-developers",
   "url": "https://drains.watch/i/cursor-fake-solidity-extension-500k-crypto-theft-jul-2025"
  }
 ]
}