2026-01-08 16:25:31

⚠️ Security Alert: SlowMist Research team has flagged a critical vulnerability dubbed "Vibe Coding" that poses a serious threat to developers using popular integrated development environments. The vulnerability allows malicious project folders to execute arbitrary commands automatically when opened on Windows and macOS systems through mainstream IDEs. The risk is particularly acute for developers using Cursor and other AI-assisted coding tools. According to the alert, multiple AI coding development platforms are affected by this attack vector. When users download and open compromised project files, the malicious code triggers immediately without requiring user interaction, potentially giving attackers complete system access. Developers are urged to exercise extreme caution when cloning repositories or opening project folders from untrusted sources, and to keep their IDEs and related tools fully updated with the latest security patches.

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

18 Likes

Reward
18
7
Repost
Share

Comment

0/400

PaperHandsCriminal

· 01-11 15:41

Another new vulnerability, truly incredible. Just opening the folder gets hacked, I might need to speed up even more.

View OriginalReply0

ApeShotFirst

· 01-08 22:45

Damn, Cursor has a vulnerability that was exploited—this is serious... My project files are still scattered in a messy repo.

View OriginalReply0

SeeYouInFourYears

· 01-08 16:55

Now Cursor has to be careful; just launching a project casually could get it hacked.

View OriginalReply0

MondayYoloFridayCry

· 01-08 16:53

Damn, Cursor got hit too? Now we need to keep a close eye.

View OriginalReply0

MoodFollowsPrice

· 01-08 16:41

Damn, Cursor is having issues again. Now I have to be very careful when cloning code.

View OriginalReply0

MEVHunter

· 01-08 16:38

ngl this "vibe coding" thing is exactly the kinda supply chain attack that bleeds alpha... cursor devs are sitting ducks if they're not running proper sandboxing. the real play here is that most people won't patch til it's already in the mempool, if you catch my drift. anyone still trusting random repos deserves what's coming honestly

Reply0

CryptoCross-TalkClub

· 01-08 16:30

Laughing to death, this is the "Trojan Horse" of the crypto world. Project teams have all learned new tricks. Cloning a repository and getting directly exploited for yield farming, my leek life really never ends. Cursor is popular, but this wave of attacks, luckily we don't write code, only jokes. Hidden knives in open-source projects, thank goodness it's not a DeFi contract, or we would have lost another billion. Honestly, next time I pull code, I should recite a safety spell first—more effective than praying.

View OriginalReply0