AINewsnow

83 hidden commands in GitHub issues and PRs targeted CI in 61 repos. We wrote a 30-line check for the same workflow mistake

Radware found 83 GitHub issues, pull requests and comments carrying commands hidden in HTML comments, aimed at the CI of 61 public repositories, 77 of them posted in a 43-minute window on 2026-09-01. The workflow mistake they relied on has one recognizable shape: text written by an outsider, placed…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-13 02:17 · DEV Community — AI
    83 hidden commands in GitHub issues and PRs targeted CI in 61 repos. We wrote a 30-line check for the same workflow mistake

More stories

  1. Nvidia CEO Jensen Huang resigns amid revelations of extramarital affairs — CSET Georgetown
  2. Google DeepMind unveils AlphaGenome 2 for cell-type-specific DNA variant predictions — Google DeepMind Blog
  3. Google launches Gemini 4 Hydrogen, a lower-cost model that outscores Argon on one benchmark — Google DeepMind Blog
  4. Anthropic's IPO about six times oversubscribed as Nvidia's $10B pledge draws scrutiny — Economic Times Tech
  5. Warby Parker launches smart glasses with Google and Samsung, challenging Meta — The Verge AI
  6. Google expands Gemini 4 Carbon access from cybersecurity defenders to Pro users and API — Google DeepMind Blog
  7. Starting to roll out today: Claude Whiteboards, Claude Sheets and Claude Data — Anthropic (X)
  8. Google brings Gemini app to Apple CarPlay and unveils Gemini 4 Hydrogen model — Google AI Blog

Get the daily brief of stories like this at 6:30 every morning →