build1 distinct publisher
Cursor's zero-click RCE settles it: agent repo access is untrusted input
A hostile Git repository was enough to run code on a developer's machine, and three more agent failures landed the same month. The blast radius is whatever the developer can reach.
Publishers:dev.to
Reality
- Evidence20
- Adoption
- Insufficient
- Hype gap+40
- Incentives30
- Confidence25