🧨 Caution: Cursor + Supabase MCP will leak your private SQL tables — it’s only a matter of time.
In our latest test, a simple user message was enough to make Cursor leak integration_tokens to the attacker who submitted it. Here’s the anatomy of the breach 🧵 (1/6)
