Hacker News new | ask | show | jobs
by jeremyjh 18 days ago
Cursor is an editor. Why is it executing untrusted code when a folder is opened? Opening a folder is not equivalent to executing a script contained in the repo. How can you think that is ok?
1 comments
dev_daftly 18 days ago
It's not executing untrusted code, it's calling git when you have a malicious version of git on your system
link
jeremyjh 17 days ago
No, read the report. It will call an executable called git.exe in the untrusted repo.
link