GOOGLE ANTIGRAVITY EXFILTRATES DATA

Summary from the TLDR Dev newsletter

An indirect prompt injection can lead to data exfiltration in Google's new agentic code editor, Antigravity. Attackers can manipulate Gemini (Antigravity's AI) to collect sensitive credentials and code snippets from the user's workspace by poisoning a seemingly harmless file. Gemini then bypasses file access protections and uses a browser subagent to transmit this data to an attacker-controlled site via a crafted URL.