#Ghostcommit

Ghostcommit Attack Explained: How Malicious PNGs Bypass AI Code Review

Ghostcommit is a new supply chain attack targeting AI coding tools that hides malicious instructions in PNG pixels, bypassing automated code review to steal .env secrets via indirect prompt injection.