Quite nasty attack on user of #github #copilot #cursor.
In short: if you download any rules’ example files be aware that there might be some Unicode characters that would make the rule malicious. Non readable for us monkeys. Monkey sees, monkey copy, monkey paste, monkey proud AF to be #vibecoding.
Then shit happens.
🐵 🫡
https://www.pillar.security/blog/new-vulnerability-in-github-copilot-and-cursor-how-hackers-can-weaponize-code-agents
In short: if you download any rules’ example files be aware that there might be some Unicode characters that would make the rule malicious. Non readable for us monkeys. Monkey sees, monkey copy, monkey paste, monkey proud AF to be #vibecoding.
Then shit happens.
🐵 🫡
https://www.pillar.security/blog/new-vulnerability-in-github-copilot-and-cursor-how-hackers-can-weaponize-code-agents
1
