Case cursor-npm-macos-backdoorAI supply chainWorldwide
npm packages 'sw-cur' and 'aiide-cur' backdoor Cursor on macOS, 3,200 downloads
Socket found three npm packages promising cheap Cursor access that stole Cursor credentials, patched Cursor's main.js with attacker code, disabled auto-update and restarted the IDE to keep remote execution inside it.
HighAttack on AIStatus: ContainedVerified case file
Open in the interactive mapCite this case
- Reported
- May 9, 2025
- Location
- Worldwide
- Target
- Cursor AI editor users on macOS
- Severity
- High
- Triggered by
- npm accounts gtr2018 and aiide
- Actor type
- Criminal
- Reported loss
- None reported
- CVE
- None
What happened
Socket found three npm packages promising cheap Cursor access that stole Cursor credentials, patched Cursor's main.js with attacker code, disabled auto-update and restarted the IDE to keep remote execution inside it.
Impact: More than 3,200 downloads; infected Cursor installs ran attacker-controlled code with auto-update disabled, exposing credentials, source code and build pipelines
Who triggered it
Actor: npm accounts gtr2018 and aiide
Attribution: Published under the npm usernames gtr2018 and aiide; no further attribution
Motive: Credential theft and persistent code execution inside a developer IDE, with potential for source and CI/CD compromise
How it happened
Attack vector: Malicious npm packages advertised as tools for cheap Cursor access; install script harvested credentials, fetched an encrypted payload and overwrote files under Cursor.app
Root cause: Developers trusting unofficial npm packages to bypass subscription fees; IDE application files writable by the user and no integrity checking of patched components
Timeline
- sw-cur and sw-cur1 published by gtr2018
- aiide-cur published by aiide
- Socket discloses the campaign with over 3,200 combined downloads and petitions npm for removal
Response
Socket requested removal from npm and advised victims to reinstall Cursor from a trusted source, rotate credentials and audit code for unauthorized changes
Current status: Contained
Sources (open in a new tab)
- The Hacker News thehackernews.com
- SecurityWeek securityweek.com
Cite this case
npm packages 'sw-cur' and 'aiide-cur' backdoor Cursor on macOS, 3,200 downloads. AI Threat Watch, case cursor-npm-macos-backdoor, May 9, 2025. https://aithreat.io/cases/cursor-npm-macos-backdoor/
Permanent link: https://aithreat.io/cases/cursor-npm-macos-backdoor/