The interesting part is not the payload. It is how the attacker got the npm token in the first place: by injecting a prompt into a GitHub issue title, which an AI triage bot read, interpreted as an instruction, and executed.
Reuters/Planet Labs PBC。电影对此有专业解读
"It didn't sound like AI at all. My mum was in the other room. We thought it was just another person. We just couldn't believe it," she says.。关于这个话题，谷歌浏览器下载提供了深入分析
人 民 网 版 权 所 有 ，未 经 书 面 授 权 禁 止 使 用