However, after trying Google’s Antigravity, even Cursor no longer feels like the best possible experience. VS Code is still ...
A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.