20250524 - AI coding bot allows prompt injection with a pull request

🎶 we're no strangers to love 🎶 Text version: https://pivot-to-ai.com/2025/05/24/ai-coding-bot-allows-prompt-injection-with-a-pull-request/ Please send money! It's very helpful! Patreon: https://www.patreon.com/davidgerard Ko-Fi: https://ko-fi.com/A1529D5 Buy me nice things: https://www.amazon.co.uk/hz/wishlist/ls/3Q8VZW46J6DM6 Get an extremely cool Pivot to AI shirt: https://pivot-to-ai.redbubble.com Sources: GitLab Duo: https://docs.gitlab.com/user/gitlab_duo/ Remote Prompt Injection in GitLab Duo Leads to Source Code Theft https://www.legitsecurity.com/blog/remote-prompt-injection-in-gitlab-duo Previously on Pivot to AI: GitHub wants to spam open source projects with AI slop https://pivot-to-ai.com/2025/05/20/github-wants-to-spam-open-source-projects-with-ai-slop/ video: https://www.youtube.com/watch?v=XM1EPHaHBuM&list=UU9rJrMVgcXTfa8xuMnbhAEA You can't feed generative AI on 'bad' data then filter it for only 'good' data https://pivot-to-ai.com/2025/05/22/you-cant-feed-generative-ai-on-bad-data-then-filter-it-for-only-good-data/ video: https://www.youtube.com/watch?v=GnFozXDgrug&list=UU9rJrMVgcXTfa8xuMnbhAEA Full Pivot to AI playlist: https://www.youtube.com/playlist?list=UU9rJrMVgcXTfa8xuMnbhAEA