🪦

Vibe Graveyard

Back to Graveyard

IDEsaster research exposes 30+ flaws in EVERY major AI coding IDE

Tombstone icon
Dec 2025

Security researcher Ari Marzouk discovered over 30 vulnerabilities across AI coding tools including GitHub Copilot, Cursor, Windsurf, Claude Code, Zed, JetBrains Junie, and more. 100% of tested AI IDEs were vulnerable to attack chains combining prompt injection with auto-approved tool calls and legitimate IDE features to achieve data exfiltration and remote code execution.

Incident Details

Perpetrator:AI coding assistants
Severity:Catastrophic
Blast Radius:Millions of developers using AI-powered IDEs exposed to RCE and data exfiltration via universal attack chains