Cursor IDE Dependency Cooldown Bypass Disclosed

A security researcher demonstrated that Cursor, the AI-powered code editor, can bypass dependency cooldown protections designed to prevent premature or malicious package updates. The bypass raises supply chain security concerns for developers relying on the tool, though technical details remain limited in the initial disclosure.