Your AI Coding Assistant Can Be Tricked: The GhostApproval Flaw and How to Code Safely with AI
Researchers just showed that a booby-trapped code repo can trick six popular AI coding assistants into writing files where they shouldn’t – and that the ‘approve this action’ button you rely on can be lying to you. Here’s what the GhostApproval flaw means, why blind trust in AI code is the real risk, and the simple habits that keep you safe.