Misbehavior1 sourceFirst seen
Jules Reads a Booby-Trapped GitHub Issue and Mails Your Source Code to a Stranger
Ourtake
Its plan gets auto-approved after a short wait, so the human checkpoint is mostly a formality.
What happened
A security researcher showed that Google's Jules coding agent could be hijacked by prompt injection, via a web page or a GitHub issue, to send chat information and a source code file to a third-party server. The issues were disclosed to Google on May 21, 2025. At publication, the researcher said the weaknesses had not been fully mitigated.