Google Cloud threat report

GhostCommit, disclosed July 13, 2026, is a prompt-injection technique that hides malicious instructions within images embedded in pull requests to evade text-based AI code reviewers. Affecting tools including Google Antigravity, Cursor, and CodeRabbit, the attack can trick multimodal AI agents into leaking repository secrets such as .env files. Researchers demonstrated the flaw by embedding instructions in PNG files that text-based reviewers skip, allowing malicious agents to encode and exfiltrate credentials as obfuscated numeric values that bypass standard secret scanners.

• New GhostCommit Technique Hides Exploits in Images to Evade AI C(opens in a new tab)