Distinction between code and data blurs further
2025-11-25 22:05:43.588542+01 by Dan Lyke 0 comments
PromptArmor: Google Antigravity Exfiltrates Data
An indirect prompt injection in an implementation blog can manipulate Antigravity to invoke a malicious browser subagent in order to steal credentials and sensitive code from a user’s IDE.