# Snyk Security Labs Testing Update: Cursor.com AI Code Editor

DevFeed: [Snyk Security Labs Testing Update: Cursor.com AI Code Editor](<https://devfeed.tech/articles/snyk-security-labs-testing-update-cursor-com-ai-code-editor-8164.md>)

Original publisher: [Read original article](<https://snyk.io/blog/snyk-security-labs-testing-update-cursor-com-ai-code-editor/>)

Author: Danny Allan

Published: 2025-01-14T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [cursor](<https://devfeed.tech/topics/cursor.md>), [Security](<https://devfeed.tech/topics/security.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Extension](<https://devfeed.tech/topics/extension.md>), [npm](<https://devfeed.tech/topics/npm.md>), [npm packages](<https://devfeed.tech/topics/npm-packages.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Visual Studio Code](<https://devfeed.tech/topics/visual-studio-code.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [community](<https://devfeed.tech/tags/community.md>), [dependency](<https://devfeed.tech/tags/dependency.md>), [executive](<https://devfeed.tech/tags/executive.md>), [extensions](<https://devfeed.tech/tags/extensions.md>), [interest](<https://devfeed.tech/tags/interest.md>), [no-vulnerabilities](<https://devfeed.tech/tags/no-vulnerabilities.md>), [npm-packages](<https://devfeed.tech/tags/npm-packages.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [security](<https://devfeed.tech/tags/security.md>), [security-labs](<https://devfeed.tech/tags/security-labs.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

Snyk Security Labs investigated Cursor's AI Code Editor for a possible dependency confusion vulnerability involving bundled VSCode extensions and NPM packages. The research found no indications that Cursor was vulnerable to dependency confusion.

## Source excerpt

Snyk Security Labs found no indications that Cursor was in any way vulnerable to dependency confusion.