Topic: developer machine compromise

GitHub Flaw: Repositories Can Run Code on Your PC Without Permission

A security flaw in the Cursor extension for Visual Studio Code allows malicious repositories to execute unauthorized code automatically when a project folder is opened, exploiting the autorun feature. This vulnerability enables attackers to steal sensitive data like authentication tokens, tamper ...