Cursor plugin poisoning