We discovered a highly dangerous new attack vector in the Rspack repository. An attacker may reply to an issue claiming that they encountered a similar problem and provide a “reproduction” project, such as this example:
However, the reproduction project itself may contain malicious code. This means that if you use an AI agent to fix the issue, the agent may clone the project from the issue and execute it. For example, if the attack payload is hidden in an install or postinstall script of one of the project’s dependencies, the environment could be compromised as soon as the agent runs the install command. 🤡
もっと見る
