react-hydration-fix

A developer reports that Cursor Agent mode was compromised by a prompt injection attack from a malicious npm package, which attempted to exfiltrate SSH keys. The attack exploited the model's flat cont…