Ghostcommit

A PNG Tricked Your AI Coder — Your Git Repo Is Now Working for Attackers

Ghostcommit hides prompts in PNGs, tricking AI coding assistants into encoding repo secrets into commits. CodeRabbit doesn't scan images.