Poisoned Pipeline

Poisoned Pipeline / Incidents / AS172

AS172 · 2026-01

npm packages hijack Cursor on macOS

npmmacOS softwareVS Code / IDEGit / GitHubWindows software

Socket: malicious npm packages hijack the Cursor editor on macOS.

Mapped techniques

supply-chain campaign

T0109 · Resource Development · Publish malicious artifact

npm packages.

T0154 · Initial Access · Malicious IDE extension

Cursor hijack.

T0210 · Persistence · Poison AI coding-agent config or workspace

Editor/agent persistence.

Sources