Ah, Chucklefish. A publisher whose name alone sounds like something you’d find flopping around in a Monty Python sketch. But ...

A vulnerability in Google's Gemini CLI allowed attackers to silently execute malicious commands and exfiltrate data from developers' computers using allowlisted programs.