Supply chain attack targets macOS Cursor users with malicious npm packages
· Source: scworld.com
In short
Researchers have identified three malicious npm packages targeting the macOS version of the AI-assisted code editor Cursor, stealing user credentials and deploying encrypted payloads. The attack exploits developers' interest in AI tooling and cost-saving incentives, with over 3,200 downloads recorded. Additional npm packages were found stealing cryptocurrency keys, highlighting the growing threat of supply chain attacks.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 20, 2025: AI Powers $742B Supply Chain Surge with Transparency, Resilience, and Agility
Tags: supply-chain, cybersecurity, malware, npm, developers