AI 资讯

Opening a cloned repo is no longer safe

/u/No_Plan_3442 2026年06月08日 15:29 3 次阅读来源：Reddit r/programming

Solid breakdown of the Miasma worm — one commit, same dropper wired into 7 config files across VS Code, Claude Code, Gemini, Cursor, npm, Composer, and Bundler. No malicious dep needed, just clone + open. Nobody reviews these files in PRs. https://safedep.io/config-files-that-run-code/ Anyone actually treating dotfile diffs as code? submitted by /u/No_Plan_3442 [link] [留言]

本文内容来源于互联网，版权归原作者所有

查看原文

# programming

I Got Tired of AI Quiz Tools Making Up Facts That Weren't In My Notes, So I Built One That Can't

07-18

When Green Browser Tests Lie: Environment Drift, CI Noise, and Hidden Runtime Failures

07-18

Testing the SaaS Journeys That Break Across Tabs, Tenants, Regions, and Email

07-18

Opening a cloned repo is no longer safe

相关文章

1193 backends waiting on an append

Code Review, Part 2: The Reviewer That Learned To Lie Better

Steer by Intent, Monitor by Exception

I Got Tired of AI Quiz Tools Making Up Facts That Weren't In My Notes, So I Built One That Can't

When Green Browser Tests Lie: Environment Drift, CI Noise, and Hidden Runtime Failures

Testing the SaaS Journeys That Break Across Tabs, Tenants, Regions, and Email