[Dev]olution
How Can a Zip File Hijack Your AI Coding Agent?
16:07
You unzip a folder from a contractor, type your AI agent’s name, and before you write a single prompt, somebody else’s code is already running on your machine as you.
That’s GitSpawn, a flaw Manifold Security found across seven popular AI coding agents. The unsettling part is that nothing was broken or cleverly manipulated. Every agent did exactly what it was built to do.
In this solo episode,…