[mort96]

The very first paragraph of text presented to the reader on the page start with:

    After loading a project, Cursor attempts to find git binaries
    at various locations including the current workspace.
    By creating a repository with a planted malicious git.exe
    in the root, the IDE will execute it with no user interaction
    and no prompting of the user.

This is a remarkably straightforward 2 sentence explanation of the issue (the "what"). They're not exactly hiding it.