Rules File Backdoor: AI Code Editors exploited for silent supply chain attacks

Pillar Security reports a new supply-chain technique named “Rules File Backdoor” where attackers embed hidden Unicode and crafted prompts in shared rule files to coerce AI code editors (GitHub Copilot, Cursor) into producing backdoored or vulnerable code; the write-up includes technical details, a PoC video, and a responsible-disclosure timeline showing vendor responses.