Oasis Security has uncovered a flaw in the widely used AI-powered code editor Cursor that lets malicious repositories silently execute code the moment a developer opens them. According to a disclosure ...

Code is executed using Pyodide in Deno and is therefore isolated from the rest of the operating system. Under the hood, code_sandbox runs an MCP server using stdio. You can run multiple code blocks ...