Hackers Hide Malicious Rules in AI Coding Projects to Hijack Assistants
Hackers are hiding invisible prompt-injection instructions inside AI coding project configuration files (.cursorrules, CLAUDE.md, copilot-instructions.md) to hijack developer assistants, run unauthorized shell commands, and steal credentials.














