Security researchers have flagged a critical vulnerability dubbed 'Vibe Coding' that puts developers at serious risk. Here's what you need to know: malicious project folders can execute commands instantly on both Windows and macOS systems through popular IDEs. The threat is particularly acute for Cursor users, though the vulnerability spans multiple AI-assisted coding platforms. What makes this especially concerning? Several crypto developers have already fallen victim to this attack vector. If you're working in Web3 development, the scenario plays out like this—you clone a seemingly legitimate repository, open it in your IDE, and without any additional action, arbitrary code runs on your machine with your user privileges. This is a classic supply-chain attack pattern that crypto teams should take seriously. The vulnerability chain combines social engineering with technical exploitation, making it harder to detect than traditional malware. If you're using mainstream IDEs for Web3 development, review your security practices immediately. Disable auto-execution features where possible, verify project sources carefully before importing, and consider running development environments in isolated systems.