[AntonyGarand]

The malicious payload can live on the remote: `git clone` a repo, open it with cursor, and you're compromised

[4ndrewl]

It's curious the number of people here who can't link these two things.

[dev_daftly]

git clone a repo, cd into the directory, git checkout ..., and you're compromised