Expired50% confidenceFactExact time
The attack payload is hidden in the Setup initialization script of a GitHub repository and is automatically triggered when the AI tool performs installation, building, or attempts self-repair.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/6/2026
First Seen
Valid until: 10/4/2026(expired)
Sources
Related Claims
UnverifiedGitHub provides an NPM package that allows AI agents to programmatically create stacked PRs.74% similarUnverifiedSecurity researchers disclosed an attack method targeting GitHub AI agents, codenamed GitLost, which tricks the GitHub AI assistant into leaking the contents of private code repositories through prompt injection.72% similarVerifiedGitHub Coding Agent runs autonomously in an isolated cloud sandbox environment, capable of cloning repositories, analyzing Issues, planning fixes, and submitting results in the form of Pull Requests.71% similarUnverifiedThis Skill is installed by copying the GitHub repository link and informing the Agent to complete the installation automatically, with no need for manual compilation or configuration.70% similarUnverifiedAI编程项目初始化完成后必须立刻接入GitHub做分支管理和版本控制70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/113149API
curl https://kongchang.com/api/v1/knowledge/claims/113149MCP
get_claim(id=113149)