Ghostcommit uses images in Git repos to trigger prompt injection

An attack technique embeds malicious instructions within images in repositories to trick coding agents into leaking sensitive environment files. Testing showed Cursor and Antigravity models fell victim, though Claude Code's Opus model successfully detected the injection.