Hacker News Reader

Could have been a compromised CI pipeline like Jenkins or a developer machine with a malware infection.

Do you allow permissive outgoing Internet traffic from your servers? To domains recently created? This malware is for you.

Ten bucks says it's prompt hijacking an LLM being used to code and reference docs.