The very first paragraph of text presented to the reader on the page start with: After loading a project, Cursor attempts to find git binaries at vario

The very first paragraph of text presented to the reader on the page start with: After loading a project, Cursor attempts to find git binaries at various locations including the current workspace. By creating a repository with a planted malicious git.exe in the root, the IDE will execute it with no user interaction and no prompting of the user. This is a remarkably straightforward 2 sentence explanation of the issue (the "what"). They're not exactly hiding it.