Tag: Ghostcommit

  • Ghostcommit Attack Uses PNG Images to Trick AI Coding Agents Into Leaking Secrets

    Ghostcommit Attack Uses PNG Images to Trick AI Coding Agents Into Leaking Secrets

    Security researchers have uncovered a new Ghostcommit attack that targets AI coding assistants. Instead of placing malicious instructions in code, the attackers hide them inside PNG images. The technique allows malicious pull requests to pass automated code reviews before AI agents unknowingly expose sensitive repository data. Researchers say the attack exploits a gap between AI…