News for hackers. Stuff that matters.

A comment on How We Exploited CodeRabbit: From Simple PR to RCE and Write Access on 1M Repos. Parent comment

Re:How We Exploited CodeRabbit: From Simple PR to RCE and Wr... by thyrfa on Tuesday August 19, 2025 @01:52PM (#44954279)
How can you guarantee that nobody ripped the private key before the researcher told you about the issue though?
[ Parent | on HN ]
Re:How We Exploited CodeRabbit: From Simple PR to RCE and Wr... by KingOfCoders on Tuesday August 19, 2025 @01:53PM (#44954292)
Or has a backdoor installed somewhere?
[ Parent | on HN ]
Re:How We Exploited CodeRabbit: From Simple PR to RCE and Wr... by blibble on Tuesday August 19, 2025 @06:47PM (#44956956)
if they can't guarantee this then every single repo that had coderabbit is potentially compromised
[ Parent | on HN ]