Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)
A new attack exploits Git's support for symlinks to trick AI coding assistants into writing an attacker's SSH key into a victim's authorized_keys file. The technique, which involves committing a malic…