HiddenLayer: The AI programming tool Cursor used by exchanges like Coinbase has vulnerabilities.

Techub News reports that according to Cointelegraph, cybersecurity company HiddenLayer has reported a vulnerability in the AI programming tool Cursor known as the “CopyPasta License Attack.” Hackers can inject vulnerabilities into the codebase by hiding malicious instructions in the LICENSE.txt and README.md files, enticing the AI tool to do so. This tool is widely adopted by crypto assets exchanges such as Coinbase. The attack uses Markdown comments to hide prompt injections, causing the AI to automatically propagate the malicious payload while editing the files. Tests show that AI programming tools like Windsurf, Kiro, and Aider also have vulnerabilities. The malicious code can create backdoors, steal sensitive data, or incapacitate systems, and can deeply hide to avoid detection.