Security Alert: AI Programming Tool Cursor at Risk of New Virus Hijacking

By: theblockbeats.news|2025/09/05 13:32:25
0
Share
copy

BlockBeats News, September 5th, according to Cointelegraph, cybersecurity firm HiddenLayer reported that the AI programming tool Cursor has a "CopyPasta License Attack" vulnerability. Hackers can hide malicious commands in the LICENSE.txt and README.md files to induce the AI tool to inject the vulnerability into the codebase. This tool is widely adopted by cryptocurrency exchanges like Coinbase.

The attack leverages Markdown comment hiding to inject prompts, causing AI to automatically propagate the malicious payload while editing files. Tests have shown that AI programming tools such as Windsurf, Kiro, and Aider also have the same vulnerability. The malicious code can create backdoors, steal sensitive data, or cripple systems, all while deeply concealing itself to evade detection.

-- Price

--

You may also like

MegaETH Co-founder: 48 Hours After Leaving Dubai, I Reassessed the Entire Crypto Space

In an era of technological upheaval, rather than pursuing the "legitimacy" co-opted by power, it is better to sharpen the blade and build parallel systems that truly expand individual sovereignty.

Web3 Winter Mass Exodus: Resignations, Closures, Transformations, and Acquisitions

The intense collision between technology and capital, products and markets, vision and reality, each story reflects the confusion and unwillingness of the market participants.

Key Market Information Discrepancy on March 4th — A Must-Read! | Alpha Morning Report

1. Top News: Strait of Hormuz Emerges as Flashpoint in US-Iran Standoff, US Stocks Trim Losses, Asia-Pacific Markets Open Sharply Lower, Cryptocurrencies See Slight Recovery 2. Token Unlock: None

During the weekend market closure, Hyperliquid more accurately predicted the Gold reopening price than Binance

When markets are closed and real-time pricing is needed due to geopolitical risks, Hyperliquid takes the lead and is closer to the eventual futures reopening price.

OpenClaw thrusts crypto project Venice.ai into the spotlight as its token VVV surges over 500% in a single month

Openclaw Founder Advises Young People "Not to Waste Time on Cryptocurrency," Yet in its official documentation, it lists the cryptocurrency project Venice.ai as a recommended model provider.

Different Rulings in Similar Cases: Why can Uniswap go free while Tornado Cash cannot?

Time and tide wait for no man.

Popular coins

Latest Crypto News

Read more