2025-03-18 · 2025-Q1
Rules File Backdoor Attack on Cursor and Copilot
Layer tags: not yet tagged.
Target
Cursor IDE, GitHub Copilot
Impact
Malicious code injected silently into AI-generated output; invisible Unicode characters bypass code reviews
Root Cause
AI config files parsed by AI but invisible to human reviewers due to Unicode obfuscation