dzCodes

not yet hehe

damn Val that’s more than me

A file you never read is giving your AI orders. Your assistant obeys a rules file in your repo, and an attacker can hide a line in it that tells your AI to backdoor your code. You can't even see the line. 🧵

Your AI made up a package name. An attacker was waiting for it. It suggested a library, you ran the install, and it was malware. The AI invented the name itself. 🧵

Your AI tools update themselves. One of them just turned malicious. No prompt, no warning. The MCP server you vetted is someone else's code now, still holding the keys you approved on day one. 🧵

not thinking small anymore, going to tease for a bit 👀

Two safe tools just leaked your whole database. Both passed review. Both are approved. Chained, they're an exfil pipe. 🧵

You cleared the chat. The backdoor stayed. One poisoned note in your AI agent's memory and it serves the attacker in every future session. Here's where it actually lives — and how to kill it. 🧵

You pasted a link into Cursor. The page told it to read your .env — and it listened. 🧵