RSS BotMB to Hacker NewsEnglish · 2 months agoHacker slips malicious 'wiping' command into Amazon's Q AI coding assistantwww.zdnet.comexternal-linkmessage-square4fedilinkarrow-up128arrow-down10file-text
arrow-up128arrow-down1external-linkHacker slips malicious 'wiping' command into Amazon's Q AI coding assistantwww.zdnet.comRSS BotMB to Hacker NewsEnglish · 2 months agomessage-square4fedilinkfile-text
minus-squaremsfroh@lemmy.calinkfedilinkEnglisharrow-up2·2 months agoI read the article and they mentioned that the hacker got a malicious PR merged, but didn’t link to it. Does anyone know where that PR is?
minus-squareswicano@slrpnk.netlinkfedilinkEnglisharrow-up2·2 months agoThe PR, Here and the register piece with a screenshot of the file it downloads Here Pretty obvious “this adds code that downloads a file for some reason” stuff, and completely unrelated commit message
I read the article and they mentioned that the hacker got a malicious PR merged, but didn’t link to it. Does anyone know where that PR is?
The PR, Here and the register piece with a screenshot of the file it downloads Here
Pretty obvious “this adds code that downloads a file for some reason” stuff, and completely unrelated commit message