Post

I had a lot of fun with this. I learned a cool shell redirect trick for appending to a file *only* if it exists, I learned how helpfully AI agents hold doors open for you when you’re carrying a large bag of contraband, and I learned about obfuscating commands in JSON arg arrays.

It’s astonishing to me that we don’t have more guard rails on our code rn. This kind of exploit was already a rough one from a supply chain perspective, but when you add in a built-in “Agentic” helper on the inside? whew boy

PoC here — and remember! The days of running code from the internet on your machine are like over over github.com/ike/cursor-t...

OMG. I loved your story. I'd like to boost it by writing about it on The New Stack. Can I ping you if I have questions or need a quote?

absolutely!

Is there a fix