Koi AI Discovers Cursor/Windsurf/Antigravity Recommend Malware
Date: 2025-12
Affected: Cursor, Windsurf, Antigravity
Attack vector: supply-chain
Category: research
Severity: High

Koi AI researchers prevented Cursor, Windsurf, and Google Antigravity from recommending malicious packages to developers via slopsquatting and dependency confusion vectors.


Mitigations:

Architectural layers (MAESTRO):