This comes on the heels of researchers putting javascript backdoors in AI assisted programs made in cursor using poisoned includes as well.