Post
Docker
docker.com
did:plc:lijecv2z3dwixrm25nocao7t
The dev approved the git branch. The check found nothing wrong. The attack worked anyway.
Part 5 of Ajeet Raina's AI Coding Agent Horror Stories series: how a two-line injection slipped past an allowlist that was working exactly as designed:
https://bit.ly/3RUUYck
2026-08-19T13:00:26.575Z