SNYK SECURITY RESEARCHER DEPLOYS MALICIOUS NPM PACKAGES TARGETING CURSOR.COM

Summary from the TLDR InfoSec newsletter

Source Code Red claims that NPM packages were deployed to target Cursor.com by a user named sn4k-s3c from Snyk. These packages collected sensitive data from systems and exfiltrated it to an attacker-controlled web service. It is essential to be cautious when installing NPM packages and look for suspicious signals like limited files in the package.