Since Cursor is not prepared to address this vulnerability (opening a malicious directory will trigger it), and all IDEs based on VS Code may carry this risk (opening a malicious directory will prompt a Trusted Workspace confirmation, and confirming it will lead to the issue), I would like to remind everyone again through this article from SEAL Intel: There have already been numerous exploits in the wild, highly suspected to be related to North Korean hackers, so please be careful not to get caught out…