Security News Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials TheHackerNews Daniel Bender May 9, 2025 Malicious npm packages targeting Cursor macOS users stole credentials and disabled updates, impacting 3,200+ downloads.