@cursor/sdk
TypeScript SDK for Cursor agents.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/cjs/833.js | AI (source-diff): Webpack bundle of @opentelemetry/ajv; minified build output, not obfuscation. | ai | |
| phantom-deps | phantom-dep:@connectrpc/connect-web | AI (phantom-deps): Bundled build has no scannable imports; dep is used in webpack output. | ai | |
| source-diff | net-exec-file:dist/esm/833.js | AI (source-diff): Same bundle esm variant; benign RPC transport code. | ai | |
| source-diff | net-exec-file:dist/cjs/833.js | AI (source-diff): RPC/telemetry bundle; net+exec inherent to agent SDK, no hostile target. | ai | |
| source-diff | obfuscated-file:dist/cjs/84.js | AI (source-diff): Bundled local-executor agent code; build output. | ai | |
| source-diff | obfuscated-file:dist/esm/401.js | AI (source-diff): Webpack esm bundle of @connectrpc/connect. | ai | |
| source-diff | obfuscated-file:dist/cjs/401.js | AI (source-diff): Webpack bundle of @connectrpc/connect; build output. | ai | |
| source-diff | obfuscated-file:dist/esm/833.js | AI (source-diff): Webpack esm bundle output; minified, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/cjs/250.js | AI (source-diff): Webpack-bundled vendor lib (exif-parser); minified build output, recurs every build. | ai | |
| source-diff | obfuscated-file:dist/cjs/745.js | AI (source-diff): Webpack bundle chunk, minified vendor code not obfuscation. | ai | |
| source-diff | net-exec-file:dist/esm/745.js | AI (source-diff): Bundled network+exec in webpack chunk, benign. | ai | |
| source-diff | net-exec-file:dist/cjs/745.js | AI (source-diff): Bundled connectrpc network + dep eval in build output, no hostile target. | ai | |
| source-diff | net-exec-file:dist/esm/250.js | AI (source-diff): Same bundled exif-parser chunk, benign. | ai | |
| source-diff | net-exec-file:dist/cjs/250.js | AI (source-diff): exif-parser bundled eval(this) + net, standard build output. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Bundled webpack dist chunks for dual cjs/esm output; expected for this SDK. | ai | |
| source-diff | obfuscated-file:dist/cjs/88.js | AI (source-diff): webpack bundle chunk | ai | |
| source-diff | obfuscated-file:dist/esm/642.js | AI (source-diff): ESM counterpart webpack chunk. | ai | |
| source-diff | obfuscated-file:dist/cjs/18.js | AI (source-diff): Webpack chunk with sqlite blob store code; minified build output. | ai | |
| source-diff | obfuscated-file:dist/esm/18.js | AI (source-diff): ESM counterpart of webpack chunk 18. | ai | |
| source-diff | obfuscated-file:dist/esm/357.js | AI (source-diff): Webpack chunk with agent core-adapter protobuf code. | ai | |
| source-diff | obfuscated-file:dist/cjs/618.js | AI (source-diff): Webpack chunk with local-executor code; minified build output. | ai | |
| source-diff | obfuscated-file:dist/cjs/642.js | AI (source-diff): Webpack chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/cjs/656.js | AI (source-diff): Webpack chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/esm/656.js | AI (source-diff): ESM counterpart webpack chunk. | ai | |
| source-diff | obfuscated-file:dist/cjs/856.js | AI (source-diff): Webpack chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/esm/856.js | AI (source-diff): ESM counterpart webpack chunk. | ai | |
| source-diff | obfuscated-file:dist/cjs/986.js | AI (source-diff): Webpack chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/esm/986.js | AI (source-diff): ESM counterpart webpack chunk. | ai | |
| source-diff | obfuscated-file:dist/cjs/996.js | AI (source-diff): Webpack chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/esm/996.js | AI (source-diff): ESM counterpart webpack chunk. | ai | |
| source-diff | obfuscated-file:dist/cjs/sqlite.js | AI (source-diff): Webpack bundle for sqlite entrypoint; minified build output. | ai | |
| source-diff | obfuscated-file:dist/esm/sqlite.js | AI (source-diff): ESM counterpart of sqlite webpack bundle. | ai | |
| source-diff | obfuscated-file:dist/cjs/403.js | AI (source-diff): Webpack bundle of node_modules (ajv, opentelemetry); stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/403.js | AI (source-diff): ESM counterpart of same webpack bundle; stable pattern. | ai | |
| source-diff | net-exec-file:dist/cjs/403.js | AI (source-diff): Bundled ajv + network libs trigger this heuristic; not malicious. | ai | |
| source-diff | net-exec-file:dist/esm/403.js | AI (source-diff): ESM counterpart; same bundled libs trigger heuristic. | ai | |
| source-diff | obfuscated-file:dist/cjs/429.index.js | AI (source-diff): Webpack bundle chunk; not obfuscated, just minified build output. | ai | |
| source-diff | net-exec-file:dist/cjs/745.index.js | AI (source-diff): Bundled library code (ajv, opentelemetry) naturally contains net+eval patterns. | ai | |
| source-diff | obfuscated-file:dist/esm/745.index.js | AI (source-diff): Webpack ESM bundle chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/cjs/745.index.js | AI (source-diff): Webpack bundle chunk bundling opentelemetry/ajv; minified build output. | ai | |
| source-diff | obfuscated-file:dist/esm/429.index.js | AI (source-diff): Webpack ESM bundle chunk; minified build output. | ai | |
| source-diff | net-exec-file:dist/esm/745.index.js | AI (source-diff): ESM counterpart of same bundled library code. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Official Cursor SDK with 128k weekly downloads; not spam. | ai | |
| source-diff | obfuscated-file:dist/cjs/642.index.js | AI (source-diff): Webpack-bundled dist output with readable module paths; standard for this SDK package. | ai | |
| phantom-deps | phantom-dep:@statsig/js-client | AI (phantom-deps): Consumed via webpack bundle, not direct import; stable false positive. | ai | |
| source-diff | encoded-string-file:dist/esm/index.js | AI (source-diff): ESM counterpart; same ajv-formats regex strings. | ai | |
| source-diff | encoded-string-file:dist/cjs/index.js | AI (source-diff): Long strings are URI-reference regexes from bundled ajv-formats; not payloads. | ai | |
| source-diff | obfuscated-file:dist/esm/642.index.js | AI (source-diff): ESM webpack bundle counterpart; same pattern as CJS build. | ai | |
| phantom-deps | phantom-dep:sqlite3 | AI (phantom-deps): Declared in dependencies; used in build/config, not direct imports. | ai | |
| phantom-deps | phantom-dep:@connectrpc/connect-node | AI (phantom-deps): Declared in dependencies; used in build/config, not direct imports. | ai | |
| phantom-deps | phantom-dep:@bufbuild/protobuf | AI (phantom-deps): Declared in dependencies; used in build/config, not direct imports. | ai |
Versions (showing 15 of 15)
| Version | Deps | Published |
|---|---|---|
| 1.0.24 | 6 / 33 | |
| 1.0.23 | 6 / 31 | |
| 1.0.22 | 6 / 31 | |
| 1.0.21 | 6 / 31 | |
| 1.0.20 | 5 / 30 | |
| 1.0.19 | 5 / 30 | |
| 1.0.18 | 6 / 29 | |
| 1.0.17 | 6 / 29 | |
| 1.0.16 | 6 / 29 | |
| 1.0.15 | 6 / 28 | |
| 1.0.14 | 6 / 28 | |
| 1.0.13 | 6 / 28 | |
| 1.0.10 | 6 / 28 | |
| 1.0.9 | 6 / 28 | |
| 1.0.7 | 5 / 28 |
v1.0.24
9 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: luist18.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.23
25 findingsThis version was published by a different npm account than previous versions on 2026-07-03. This could indicate a legitimate maintainer transition or an account compromise.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.