News for hackers. Stuff that matters.

A comment on Snyk security researcher deploys malicious NPM packages targeting Cursor.com. Parent comment

Re:Snyk security researcher deploys malicious NPM packages t... by px43 on Tuesday January 14, 2025 @08:12AM (#42696735)
> Cursor does not have a bug bounty

Shouldn't this alone be considered criminal negligence at this point? Cursor isn't some random open source project. It's a company that has funding, and subscriptions. Hell, I pay Cursor for a monthly subscription. Pretty incredible that they have no bounty program.

[ Parent | on HN ]
Re:Snyk security researcher deploys malicious NPM packages t... by britannio on Tuesday January 14, 2025 @08:35AM (#42696989)
The lack of a bug bounty program doesn't prohibit them from rewarding reported vulnerabilities.
[ Parent | on HN ]
Re:Snyk security researcher deploys malicious NPM packages t... by taskforcegemini on Tuesday January 14, 2025 @12:19PM (#42700368)
do they though?
[ Parent | on HN ]