Hacker News Reader

you would only need to open it to be exploited, not edit or prompt. Allegedly

From the article it occurs when Cursor is loaded. iDEs do a lot of stuff when they first open.