GitSpawn Turns Booby-Trapped Repositories Into Silent Code Execution Across AI Coding Tools
GitSpawn weaknesses allow specially prepared project folders to execute local commands when AI coding agents perform routine Git checks. Several vendors have patched variants, but researchers say four tracked issues remained unresolved at disclosure. The post GitSpawn Turns Booby-Trapped Repositories Into Silent Code Execution Across AI Coding Tools appeared first on Secure Bulletin.
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.