News for hackers. Stuff that matters.

muzzle

Re:Code highlighting with Cursor AI used for $500k theft on Tuesday July 15, 2025 @07:57AM (#44570225)
I also naively thought that IDE extensions where sandboxed until I worked myself on making extensions.

Well, it’s absolutely not and you can access the full filesystem. Which is handy if you are legit, but very permissive & much more a security threat than I imagined.

Be careful what extensions you install people :)