Rekt - Invisible Prompts

Trusted developer tools and AI systems are becoming attack vectors, with malicious code and planted instructions exploiting the trust users place in them. A fake "Solidity Language" VS Code extension with 54,000 downloads reportedly drained $500,000 from a Russian blockchain developer, and a later copy claimed nearly two million fake downloads. Princeton researchers reportedly used planted fake memories to get the ElizaOS trading bot to send real Ethereum to their address, and Microsoft patched EchoLeak, a zero-click Copilot flaw that could expose enterprise data. The text also says spotlighting defenses became much less effective against adaptive attacks.