Verified Findings

None

Contradictions / Caveats

None

Open Follow-up

• OPEN [HIGH]: PUBLISHING_PATH_ROOT_CAUSE — Exact credential/account/workflow path allowing malicious builds into Cursor Marketplace is not publicly established.
• OPEN [HIGH]: EXECUTION_REMOTE_ACCESS_DENOMINATOR — No reliable public denominator separates install/update exposure, loader execution, persistence installation and successful remote SSH access.
• OPEN [MEDIUM-HIGH]: POST_COMPROMISE_ACTIVITY_ATTRIBUTION — Public evidence does not quantify interactive sessions, credential/session abuse, lateral movement or identify the actor.

Sources

None