
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
A Python script that automatically detects and clicks the "resume the conversation" button when Cursor AI reaches its 25 tool call limit.
This script runs in the background and monitors your Cursor AI editor for the message:
"Note: By default, we stop the agent after 25 tool calls. You can resume the conversation."
When detected, it automatically clicks the blue "resume" link to continue the AI agent's work without manual intervention.
For the script to work properly, one of the following conditions must be met:
The script needs to be able to see the "resume" button on screen to click it.
First, install Tesseract OCR:
brew install tesseract
For standard installation:
pip install cursor-resumer
Note for macOS users with Python 3.11+: If you encounter an "externally-managed-environment" error, use one of these methods:
Method A: Virtual Environment (Recommended)
python3 -m venv cursor-env
source cursor-env/bin/activate
pip install cursor-resumer
Method B: pipx (Isolated Installation)
brew install pipx
pipx install cursor-resumer
Method C: Force Installation (Not Recommended)
pip install --break-system-packages cursor-resumer
# OR
pip install --user cursor-resumer
# Clone the repository
git clone https://github.com/khaterdev/cursor-resumer
cd cursor-resumer
# Install in development mode
pip install -e .
# Clone the repository
git clone https://github.com/khaterdev/cursor-resumer
cd cursor-resumer
# Create virtual environment
python3 -m venv venv
# Activate virtual environment
source venv/bin/activate # On macOS/Linux
# Install the package
pip install .
After installation, you can run the script from anywhere:
cursor-resumer
Or if running from source:
python -m cursor_resumer
The script will start monitoring:
Cursor Resumer Monitor Started
Running in background mode - Cursor won't be brought to front until resume is found
Checking every 1 second
Press Ctrl+C to stop
Continue using your computer normally. When Cursor hits the 25 tool limit, the script will automatically click resume:
Clicked resume button! (Total: 1)
Stop the script with Ctrl+C
# Show help
cursor-resumer --help
# Run in verbose mode (shows all detection attempts)
cursor-resumer --verbose
# Enable debug screenshots (saves images to debug_screenshots/)
cursor-resumer --debug
# Run in quiet mode (default)
cursor-resumer --quiet
You can modify these settings in the source code (cursor_resumer/main.py
):
CHECK_INTERVAL = 1 # How often to check (seconds)
MIN_CLICK_INTERVAL = 10 # Minimum seconds between clicks
VERBOSE = False # Show detailed logging
DEBUG_SAVE_SCREENSHOTS = False # Save screenshots for debugging
BACKGROUND_MODE = True # Run quietly in background
This error occurs on macOS with Python 3.11+ due to system Python protection. Solutions:
Use virtual environment (recommended):
python3 -m venv venv
source venv/bin/activate
pip install cursor-resumer
Use pipx:
brew install pipx
pipx install cursor-resumer
Force install (not recommended):
pip install --break-system-packages cursor-resumer
Install Tesseract OCR:
brew install tesseract
--verbose
to see what's being detected--debug
to see what the script seesGrant Terminal/IDE accessibility permissions:
The script only clicks on blue text containing "resume". If it's clicking incorrectly:
source venv/bin/activate
deactivate
rm -rf venv
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
cursor-resumer/
āāā cursor_resumer/
ā āāā __init__.py # Package initialization
ā āāā main.py # Main script
āāā setup.py # Package setup file
āāā pyproject.toml # Modern Python packaging config
āāā requirements.txt # Python dependencies
āāā README.md # This file
āāā LICENSE # MIT License
āāā venv/ # Virtual environment (not in git)
Run with debug screenshots enabled:
cursor-resumer --debug
This creates a debug_screenshots/
folder with images showing:
This project is licensed under the MIT License - see the LICENSE file for details.
Feel free to submit issues or pull requests if you find bugs or have improvements!
FAQs
Automatically clicks resume button when Cursor AI hits 25 tool call limit
We found that cursor-resumer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.