Audit GitHub Actions for injection and privilege
pull_request_target with checkout of untrusted code, and expressions built from PR text, hand attackers your CI secrets.
Tag: supply-chain
Prompt injection in code assistants through comments
AI coding tools ingest repo files as context, so a crafted comment or config can steer generated code toward a backdoor.
Poison shared few-shot templates
If example sets or prompt templates are user-contributed or fetched at runtime, a poisoned example becomes a persistent instruction.