Hacker News Reader

Cursor is an editor. Why is it executing untrusted code when a folder is opened? Opening a folder is not equivalent to executing a script contained in the repo. How can you think that is ok?

View on HN

It's not executing untrusted code, it's calling git when you have a malicious version of git on your system

No, read the report. It will call an executable called git.exe in the untrusted repo.

Reply on news.ycombinator.com