A similar thing happened to me, but I still don’t know if it was a bug or I got hacked?
https://forum.cursor.com/t/the-agent-wrote-various-texts-and-commands-in-the-chat-prompt-by-itself-is-this-a-cursor-bug-or-have-i-been-hacked/145137