Cursor's AI coding agent morphed 'into local shell' with one-line prompt attack cyberscoop.com 3 points by geox a day ago