Code execution from configuration: CurXecute and MCPoison ran attacker commands with the developer’s privileges, which reach every key and token on the machine.
A sandbox you can’t fully rely on: DuneSlide, NomShub, CVE-2026-26268 and CVE-2026-73217 all escaped it, and a macOS escape through privileged Docker containers had no fix at publication (GitHub advisory).
Money lost to an extension: a fake “Solidity Language” extension on Open VSX cost a blockchain developer about $500,000 (Kaspersky).
Instructions no reviewer sees: Pillar Security hid instructions in rules files with invisible characters, and Cursor said the issue “falls under the users’ responsibility” (Pillar Security).