This week's Wild West roundup is a doozy:
- This week's Wild West roundup is a doozy:
- Clinejection: A GitHub Issue Title Compromised 4,000 Developer Machines.
- Simon's write up is also worth reading.
- "we hijacked perplexity comet by sending a weaponized calendar invite
- then used it to takeover victim's 1p account and exfil their local files
- call it pleasefix. like clickfix, but instead of social eng'ing a human you just ask their ai real nicely"
- Also covered in this Twitter post: trust your inputs, lose your repo.