A vulnerability in Google's Gemini CLI allowed attackers to silently execute malicious commands and exfiltrate data from developers' computers using allowlisted programs.

In what's the latest instance of a software supply chain attack, unknown threat actors managed to compromise Toptal's GitHub ...