BlockBeats 消息，9 月 5 日，据 Cointelegraph 报道，网络安全公司 HiddenLayer 报告称，AI 编程工具 Cursor 存在“CopyPasta 许可证攻击”漏洞，黑客可通过在 LICENSE.txt 和 README.md 文件中隐藏恶意指令，诱导 AI 工具将漏洞注入代码库。该工具被 Coinbase 等加密交易平台广泛采用。
攻击利用 Markdown 注释隐藏提示注入，使 AI 在编辑文件时自动传播恶意负载。测试显示 Windsurf、Kiro 和 Aider 等 AI 编程工具同样存在漏洞。恶意代码可创建后门、窃取敏感数据或瘫痪系统，且能深度隐藏避免检测。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.