Your AI Coding Agent Leaks Secrets in PR Comments. The Fix Takes 15 Minutes.
Yeah, johns Hopkins researcher Aonan Guan dropped a malicious PR title.
It hit Claude Code. Exfiltrated the Anthropic API key. Posted it to a public comment. Same payload against Gemini CLI, same result. GitHub Copilot, same.
Three different vendors, one attack surface.
Anthropic paid $100 for this.
Nine-point-four CVSS. That&