unverified 01 Aug, 14:10 GhostApproval symlink flaw lets malicious repos hijack AI coding assistants' approval prompts to steal SSH access #substack Published on Substack