26
Vulnerable Claude code in GitHub action led to stolen NPM keys (github.com)
submitted 1 year ago by to c/programming@programming.dev
2 comments fedilink hide all child comments
 

Seems like a ton (over 1k) of people were affected because of an auto updating VS Code extension. Check your bashrc/zshrc and GitHub account if you use nx

all 2 comments

sorted by: hot top controversial new old
[–] 5 points 1 year ago* (1 child)

This doesn't look like a Claude issue or an AI issue, this looks like someone pushed malicious code to a repo and they where trying to make AI tools ignore these files? I'm not reading this wrong am I?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •