Unverified50% confidenceCautionExact time
共享账号模式下账号轮换插件需在本地管理认证凭证（如Session Token或OAuth Token），打破了Cursor原生安全链条，增加了数据泄露的攻击面
1
Sources
50%
Confidence
Long-term
Relevance
8/28/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA large-scale supply chain attack resulted in several terabytes of user credentials being leaked, involving account passwords, access tokens, and other sensitive authentication information.72% similarUnverifiedProxy payment services pose account security risks; some require users to provide their account passwords, creating a risk of information leakage.69% similarUnverifiedAfter a successful attack, the attacker can steal local sensitive credentials, including API Keys, GitHub Tokens, and cloud service keys.67% similarUnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/810579API
curl https://kongchang.com/api/v1/knowledge/claims/810579MCP
get_claim(id=810579)