|
|
|
|
|
|
by iririririr
17 days ago
|
|
|
this attack vector is part of the spec in all Java build systems. you don't even need ai slop ide. Java Devs will happily execute your malicious maven/gradle/Grovy/whatever that you push to any public repo. bonus point ofy commit message is complaining about some build plugin version compatibility |
|
|