{"id":16930,"date":"2026-11-13T09:00:00","date_gmt":"2026-11-13T08:00:00","guid":{"rendered":"https:\/\/safewave.ai\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/"},"modified":"2026-11-14T13:45:49","modified_gmt":"2026-11-14T12:45:49","slug":"breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension","status":"publish","type":"post","link":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/","title":{"rendered":"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"16930\" class=\"elementor elementor-16930 elementor-16905\" data-elementor-post-type=\"post\">\n\t\t\t\t<header class=\"elementor-element elementor-element-69a6236 e-flex e-con-boxed e-con e-parent\" data-id=\"69a6236\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7cac elementor-widget elementor-widget-heading\" data-id=\"69a7cac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/safewave.ai\/en\/secure-and-responsible-ai\/\">Secure and Responsible AI<\/a><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f76 elementor-widget elementor-widget-heading\" data-id=\"69a7f76\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a72db elementor-widget elementor-widget-text-editor\" data-id=\"69a72db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>On November 13, 2026, Cursor disclosed the impact of a breach at Fireworks, an AI inference provider. A Fireworks-issued key gave the attacker access to coding agent session traces, and unmasked credentials within them led to Cursor&#8217;s SaaS tools. The attacker also tampered with the Claude Code extension in the Cursor marketplace.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f83 elementor-widget elementor-widget-html\" data-id=\"69a7f83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<ul class=\"sw-meta\"><li><span>Source<\/span><a href=\"https:\/\/cursor.com\/blog\/security-incident-update\" target=\"_blank\" rel=\"noopener\">Cursor<\/a><\/li><li>Source publicationNovember 13, 2026<\/li><li><span>Type<\/span>AI security<\/li><\/ul>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/header>\n\t\t<article class=\"elementor-element elementor-element-69a7768 e-flex e-con-boxed e-con e-parent\" data-id=\"69a7768\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7465 elementor-widget elementor-widget-text-editor\" data-id=\"69a7465\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What happened<\/h2><p><strong>Cursor.<\/strong> According to Cursor, the attacker used a key issued for Fireworks that leaked from the provider to exfiltrate storage data: coding agent session traces, primarily from 2025, from sessions outside Privacy Mode. Some contained unmasked credentials. Using these, the attacker accessed select SaaS tools, archived repositories, customer support data, and emails. On October 29, the attacker placed malicious copies of the Claude Code extension in the Cursor extension marketplace cache. Cursor notes this was not a vulnerability in the Anthropic product.<\/p><p><strong>Notion.<\/strong> Notion reported on November 9 that data stolen from Fireworks may have included Notion AI chat transcripts used in the Insights feature \u2013 affecting fewer than 1% of workspaces. The company severed ties with Fireworks on November 3 and disabled Insights during the investigation.<\/p><p><strong>Fireworks.<\/strong> The provider reports that on October 24, an unauthorized party reached its developer machines following an incident at an external cloud provider. For a subset of accounts, secrets, datasets, and incomplete model weights were exposed. Fireworks links the incident to a threat group reselling unauthorized access to language models (LLMjacking).<\/p><h2>Key findings<\/h2><ul><li>Malicious versions of the Anthropic.claude-code extension (2.1.312 and 2.1.313) were available for approximately 11 hours; according to Cursor, up to 5,000 users may have downloaded them.<\/li><li>API keys were exposed for fewer than 0.01% of Cursor customers; agent traces affected fewer than 0.05% of users.<\/li><li>According to Cursor, Privacy Mode data, production systems, signed application releases, and customer repositories were not impacted.<\/li><li>Notion recommends treating affected data as compromised and rotating passwords and keys pasted into Notion AI.<\/li><li>Cursor migrated inference workloads away from Fireworks, rotated leaked credentials, and proactively rotated all active internal credentials.<\/li><\/ul><h2>Why it matters<\/h2><div class=\"sw-take\"><span class=\"sw-take__k\">SafeWave CommentaryThis incident combines<\/span> two risks we highlighted regarding <a href=\"https:\/\/safewave.ai\/en\/ai-assistants-on-workstations-three-weaknesses-in-one-week-claude-code-claude-dispatch-and-chatgpt\/\">vulnerabilities in AI coding assistants<\/a>: secrets embedded in agent data and developer tooling supply chains. Prompts, agent traces, and chat transcripts are sent to third-party sub-processors organizations often know nothing about \u2013 in this case, the vendor\u2019s inference provider. For enterprises in Poland, this constitutes third-party risk under NIS2, Poland\u2019s KSC Act and DORA, and \u2013 where personal data is present in chats \u2013 under GDPR as well. Recommended actions: rotate all secrets ever used in AI agent sessions and&nbsp;pasted into chats; check whether users installed versions 2.1.312\u20132.1.313 of the Claude Code extension from the Cursor marketplace on October 29 and follow remediation steps in Cursor&#8217;s advisory; enforce zero-data-retention modes and full sub-processor lists from AI vendors; inspect and mask data sent to GenAI tools \u2013 an area where we work with Zscaler. More: <a href=\"https:\/\/safewave.ai\/en\/secure-and-responsible-ai\/\">Secure and Responsible AI<\/a>.<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t<aside class=\"elementor-element elementor-element-69a7d8c e-flex e-con-boxed e-con e-parent\" data-id=\"69a7d8c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f4a elementor-widget elementor-widget-text-editor\" data-id=\"69a7f4a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"sw-h\">Source<\/p><ul class=\"sw-src\"><li><a href=\"https:\/\/cursor.com\/blog\/security-incident-update\" target=\"_blank\" rel=\"noopener\">Cursor \u2013 An update on our recent security incident<\/a><\/li><li><a href=\"https:\/\/www.notion.com\/security\/advisories\/security-incident-involving-a-third-party-ai-vendor-nov9\" target=\"_blank\" rel=\"noopener\">Notion \u2013 Fireworks AI incident (11-09)<\/a><\/li><li><a href=\"https:\/\/fireworks.ai\/security\/bulletins\/october-2026-security-incident-update\" target=\"_blank\" rel=\"noopener\">Fireworks AI \u2013 Update on October 2026 security incident<\/a><\/li><\/ul><p class=\"sw-rel\"><a href=\"https:\/\/safewave.ai\/en\/secure-and-responsible-ai\/\">Area: Secure and Responsible AI \u2192<\/a><a href=\"https:\/\/safewave.ai\/en\/technology-intelligence\/\">All analyses \u2192<\/a><\/p><p class=\"sw-asof\">SafeWave editorial analysis based on the cited source. Facts come from the source; the &#8220;Why it matters&#8221; section is our commentary.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/aside>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>The breach at Fireworks exposed Cursor agent session traces containing credentials and Notion AI chats. The attacker tampered with the Claude Code extension. What to do with exposed secrets.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"footnotes":""},"categories":[271],"tags":[],"class_list":["post-16930","post","type-post","status-publish","format-standard","hentry","category-secure-and-responsible-ai"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension &#8211; SafeWave<\/title>\n<meta name=\"description\" content=\"The breach at Fireworks exposed Cursor agent session traces containing credentials and Notion AI chats. The attacker tampered with the Claude Code extension. What to do with exposed secrets.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension &#8211; SafeWave\" \/>\n<meta property=\"og:description\" content=\"The breach at Fireworks exposed Cursor agent session traces containing credentials and Notion AI chats. The attacker tampered with the Claude Code extension. What to do with exposed secrets.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/\" \/>\n<meta property=\"og:site_name\" content=\"SafeWave\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-13T08:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-14T12:45:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/safewave.ai\/wp-content\/uploads\/2026\/11\/safewave-cybersecurity-x-ai-1200x630-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"SafeWave\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"SafeWave\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\\\/\"},\"author\":{\"name\":\"SafeWave\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/person\\\/9e9fc64ff61c418abb6f658be85dcf4a\"},\"headline\":\"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension\",\"datePublished\":\"2026-11-13T08:00:00+00:00\",\"dateModified\":\"2026-11-14T12:45:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\\\/\"},\"wordCount\":552,\"publisher\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\"},\"articleSection\":[\"Secure and Responsible AI\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\\\/\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\\\/\",\"name\":\"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension &#8211; SafeWave\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#website\"},\"datePublished\":\"2026-11-13T08:00:00+00:00\",\"dateModified\":\"2026-11-14T12:45:49+00:00\",\"description\":\"The breach at Fireworks exposed Cursor agent session traces containing credentials and Notion AI chats. The attacker tampered with the Claude Code extension. What to do with exposed secrets.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/safewave.ai\\\/en\\\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\",\"name\":\"SafeWave\",\"description\":\"We protect people, data and AI.\",\"publisher\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\"},\"alternateName\":\"SafeWave sp. z o.o.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/safewave.ai\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\",\"name\":\"SafeWave\",\"alternateName\":\"SafeWave sp. z o.o.\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/safewave.ai\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/SafeWave-BLACK_350.png\",\"contentUrl\":\"https:\\\/\\\/safewave.ai\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/SafeWave-BLACK_350.png\",\"width\":350,\"height\":270,\"caption\":\"SafeWave\"},\"image\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/safewave-ai\",\"https:\\\/\\\/www.youtube.com\\\/@SafeWaveAI\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/person\\\/9e9fc64ff61c418abb6f658be85dcf4a\",\"name\":\"SafeWave\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"caption\":\"SafeWave\"},\"description\":\"Zesp\u00f3\u0142 SafeWave \u2013 cyberbezpiecze\u0144stwo i AI dla firm od 1998 roku. Analizy Technology Intelligence przygotowujemy z pomoc\u0105 AI i weryfikujemy redakcyjnie.\",\"sameAs\":[\"https:\\\/\\\/safewave.ai\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension &#8211; SafeWave","description":"The breach at Fireworks exposed Cursor agent session traces containing credentials and Notion AI chats. The attacker tampered with the Claude Code extension. What to do with exposed secrets.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/","og_locale":"en_US","og_type":"article","og_title":"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension &#8211; SafeWave","og_description":"The breach at Fireworks exposed Cursor agent session traces containing credentials and Notion AI chats. The attacker tampered with the Claude Code extension. What to do with exposed secrets.","og_url":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/","og_site_name":"SafeWave","article_published_time":"2026-11-13T08:00:00+00:00","article_modified_time":"2026-11-14T12:45:49+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/safewave.ai\/wp-content\/uploads\/2026\/11\/safewave-cybersecurity-x-ai-1200x630-1.png","type":"image\/png"}],"author":"SafeWave","twitter_card":"summary_large_image","twitter_misc":{"Written by":"SafeWave","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/#article","isPartOf":{"@id":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/"},"author":{"name":"SafeWave","@id":"https:\/\/safewave.ai\/en\/#\/schema\/person\/9e9fc64ff61c418abb6f658be85dcf4a"},"headline":"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension","datePublished":"2026-11-13T08:00:00+00:00","dateModified":"2026-11-14T12:45:49+00:00","mainEntityOfPage":{"@id":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/"},"wordCount":552,"publisher":{"@id":"https:\/\/safewave.ai\/en\/#organization"},"articleSection":["Secure and Responsible AI"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/","url":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/","name":"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension &#8211; SafeWave","isPartOf":{"@id":"https:\/\/safewave.ai\/en\/#website"},"datePublished":"2026-11-13T08:00:00+00:00","dateModified":"2026-11-14T12:45:49+00:00","description":"The breach at Fireworks exposed Cursor agent session traces containing credentials and Notion AI chats. The attacker tampered with the Claude Code extension. What to do with exposed secrets.","breadcrumb":{"@id":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/safewave.ai\/en\/breach-at-ai-provider-fireworks-credentials-from-cursor-agent-traces-and-tampered-claude-code-extension\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/safewave.ai\/en\/"},{"@type":"ListItem","position":2,"name":"Breach at AI provider Fireworks: credentials from Cursor agent traces and tampered Claude Code extension"}]},{"@type":"WebSite","@id":"https:\/\/safewave.ai\/en\/#website","url":"https:\/\/safewave.ai\/en\/","name":"SafeWave","description":"We protect people, data and AI.","publisher":{"@id":"https:\/\/safewave.ai\/en\/#organization"},"alternateName":"SafeWave sp. z o.o.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/safewave.ai\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/safewave.ai\/en\/#organization","name":"SafeWave","alternateName":"SafeWave sp. z o.o.","url":"https:\/\/safewave.ai\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/safewave.ai\/en\/#\/schema\/logo\/image\/","url":"https:\/\/safewave.ai\/wp-content\/uploads\/2022\/05\/SafeWave-BLACK_350.png","contentUrl":"https:\/\/safewave.ai\/wp-content\/uploads\/2022\/05\/SafeWave-BLACK_350.png","width":350,"height":270,"caption":"SafeWave"},"image":{"@id":"https:\/\/safewave.ai\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/safewave-ai","https:\/\/www.youtube.com\/@SafeWaveAI"]},{"@type":"Person","@id":"https:\/\/safewave.ai\/en\/#\/schema\/person\/9e9fc64ff61c418abb6f658be85dcf4a","name":"SafeWave","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","caption":"SafeWave"},"description":"Zesp\u00f3\u0142 SafeWave \u2013 cyberbezpiecze\u0144stwo i AI dla firm od 1998 roku. Analizy Technology Intelligence przygotowujemy z pomoc\u0105 AI i weryfikujemy redakcyjnie.","sameAs":["https:\/\/safewave.ai"]}]}},"_links":{"self":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/comments?post=16930"}],"version-history":[{"count":2,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16930\/revisions"}],"predecessor-version":[{"id":16937,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16930\/revisions\/16937"}],"wp:attachment":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/media?parent=16930"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/categories?post=16930"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/tags?post=16930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}