A deep dive into “Clinejection”, where an attacker injected a prompt into a GitHub issue title, which an AI triage bot interpreted as an instruction. The resulting chain led to cache poisoning, credential theft, and a compromised npm package that silently installed a second AI agent on 4,000 developer machines.
PHP
★ Typed routes from Laravel to React with Wayfinder
I’ve been writing about There There a lot lately. It’s a helpdesk we’re building at Spatie, born from two decades of running our own customer support for our open source work and SaaS apps. After Read more…