This happened with Engramma, my tool for editing JSON with design tokens. No phishing, no malware, only anonymous analytics.
Try unlimited accessOnly HK$10 for 4 weeks。heLLoword翻译官方下载对此有专业解读
Силовые структуры。电影对此有专业解读
Власти Санкт-Петербурга выплатят деньги Гуменнику за шестое место на Олимпиаде-202620:57，详情可参考PDF资料
Step 1: Prompt injection via issue title. Cline had deployed an AI-powered issue triage workflow using Anthropic's claude-code-action. The workflow was configured with allowed_non_write_users: "*", meaning any GitHub user could trigger it by opening an issue. The issue title was interpolated directly into Claude's prompt via ${{ github.event.issue.title }} without sanitisation.