Ghostcommit
Named by 3 kept items in this workspace.
Search every workspace for Ghostcommit. It matches the name as written, so it can find other things that share it.
The items that name it 3
June disclosure from the same lab (ASSET Research Group) that hid an instruction inside a PNG referenced by a project convention file, then had a coding agent encode .env secrets into source code as integers.
Supply chain attack that conceals prompt-injection instructions within PNG images to bypass AI code reviewers and trick coding agents into leaking secrets such as .env files
All threat actors in this workspace.