From the 5bats blog

Short, practical notes on the threats 5bats is built for — supply-chain attacks and prompt injection — explained plainly, and where useful, shown stopped with a 5bats tool.

June 13, 2026

Indirect prompt injection: when your AI reads the wrong instructions

Give an AI coding agent the ability to fetch a URL and you have also given it the ability to read instructions written by a stranger. Indirect prompt injection is the attack that turns that into a problem: hidden text on a page that tells the agent to do something its operator never asked for.

Read the article →

June 12, 2026

The install step is the most dangerous moment in your day

A compromised dependency does its damage at install time. Post-install scripts run, code executes, and by the time a scanner notices, it has already touched the machine. The defence that matters is the one that acts before that moment.

Read the article →

From the 5bats blog

Indirect prompt injection: when your AI reads the wrong instructions

The install step is the most dangerous moment in your day

Guides