"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

Cursor is an AI-powered fork of Visual Studio Code, which supports a feature called Workspace Trust to allow developers to ...