Cursor IDE’s 0‑day lets repos run malicious binaries silently
A zero‑day in the Cursor AI‑coding IDE lets an attacker place a malicious binary in a project’s repository and have it auto‑executed on any clone, without user interaction. Despite seven months of disclosures, the flaw remained unpatched, exposing developers to silent supply‑chain attacks.