Researchers have built a pull request that steals a repository's secrets by hiding the malicious instruction inside a PNG that AI code reviewers never open. The reviewer waves the change through.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results