How We Exploited Qodo: From a PR Comment to RCE and AWS Admin Key – Leaked Twice

kudelskisecurity.com