RSS Bot@lemmy.bestiver.seMB to Hacker News@lemmy.bestiver.seEnglish · 3 months agoHacker slips malicious 'wiping' command into Amazon's Q AI coding assistantwww.zdnet.comexternal-linkmessage-square4linkfedilinkarrow-up126arrow-down10file-textcross-posted to: [email protected]
arrow-up126arrow-down1external-linkHacker slips malicious 'wiping' command into Amazon's Q AI coding assistantwww.zdnet.comRSS Bot@lemmy.bestiver.seMB to Hacker News@lemmy.bestiver.seEnglish · 3 months agomessage-square4linkfedilinkfile-textcross-posted to: [email protected]
minus-squaremsfrohlinkfedilinkEnglisharrow-up2·3 months agoI read the article and they mentioned that the hacker got a malicious PR merged, but didn’t link to it. Does anyone know where that PR is?
minus-squareswicano@slrpnk.netlinkfedilinkEnglisharrow-up2·3 months agoThe PR, Here and the register piece with a screenshot of the file it downloads Here Pretty obvious “this adds code that downloads a file for some reason” stuff, and completely unrelated commit message
I read the article and they mentioned that the hacker got a malicious PR merged, but didn’t link to it. Does anyone know where that PR is?
The PR, Here and the register piece with a screenshot of the file it downloads Here
Pretty obvious “this adds code that downloads a file for some reason” stuff, and completely unrelated commit message