Ratings

A GitHub Issue Title Compromised 4,000 Developer Machines

A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.

2026-03-05T00:00:00-0800 grith grith team 1,000 words

Rated 2026-03-05T18:17:25-0800 - sethherr