Security News Cursor confirms security breach led to malicious Claude Code extension BleepingComputer Daniel Bender 14 Nov 2026 Share Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI.