AgentProv
← All incidents
2025-03-18 · 2025-Q1

Rules File Backdoor Attack on Cursor and Copilot

Layer tags: not yet tagged.

Target

Cursor IDE, GitHub Copilot

Impact

Malicious code injected silently into AI-generated output; invisible Unicode characters bypass code reviews

Root Cause

AI config files parsed by AI but invisible to human reviewers due to Unicode obfuscation

View this entry in the catalog