A GitHub Issue Title Compromised 4k Developer Machines

grith.ai

cross-posted to:
fuck_ai@lemmy.world

A GitHub Issue Title Compromised 4k Developer Machines

grith.ai

RSS Bot@lemmy.bestiver.seMB to Hacker News@lemmy.bestiver.seEnglish · 2 months ago

cross-posted to:
fuck_ai@lemmy.world

A GitHub Issue Title Compromised 4,000 Developer Machines

grith.ai

A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.

Comments

You must log in or # to comment.

Chat

Hacker News@lemmy.bestiver.se

hackernews@lemmy.bestiver.se

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !hackernews@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

508 users / day
2.08K users / week
4.62K users / month
9.62K users / 6 months
6 local subscribers
4.82K subscribers
26.2K Posts
17.3K Comments
Modlog