Looks similar
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)
657 points by spiridow | 219 comments
Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.
ElKaWe – Electrocaloric heat pumps(fraunhofer.de)
164 points by danans | 87 comments






