2 ms·Cursor's AI coding agent morphed 'into local shell' with one-line prompt attack3 points by geox 1y ago