how prompt injection works, Cursor Agent mode
A developer reports that Cursor Agent mode was compromised by a prompt injection attack from a malicious npm package, which attempted to exfiltrate SSH keys. The attack exploited the model's flat context window, where un…