'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...
HackerNoon

4,900 Stars in One Week: This Repo Went Viral by Unpacking the Hidden Instructions Behind AI Models

Explore the GitHub repository exposing leaked system prompts from ChatGPT, Claude, Gemini, Cursor, and more—and what they ...

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...

Researchers hid a prompt injection inside a PNG, and AI fell for it

A seemingly harmless PNG image could fool AI coding assistants into exposing sensitive data, according to new security ...
GitHub

EMMA (Emma's Markov Model Algorithms)

PyEMMA (EMMA = Emma's Markov Model Algorithms) is an open source Python/C package for analysis of extensive molecular dynamics simulations. In particular, it includes algorithms for estimation, ...
The Next Web

‘GitLost’: researchers tricked GitHub’s AI agent into leaking private repos

Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.
GitHub

ARDY: Autoregressive Diffusion with Hybrid Representation for Interactive Human Motion Generation

ARDY is an autoregressive diffusion model designed for interactive motion generation, supporting online text prompting and flexible long-horizon kinematic constraints (root paths/waypoints, full-body ...