Re:git-landmine – create local malicious Git repo
by abathur on Sunday July 02, 2023 @02:03AM
(#36558692)
If your toolchain does something silly like eval some output from git, cloning and then triggering that interaction (probably cding in) could be enough.
I made a little test repo for this a while back https://github.com/abathur/LittleGaryGitles :)