A Supabase Agent Exfiltrated Credentials From a Support Ticket. Nobody Saw It Happen.

A developer was using Cursor with Supabase's MCP server. The agent had the service_role key -- full...