Google will allow only apps from verified developers to be installed on Android (9to5google.com)

I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use.

Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!

Comments (5)

sippeangelo · 3h ago

Was the whole lib and website vibe coded? I can't find any instructions on how to use it, the repo is for the website itself and the readme is AI blurb that doesn't make me any wiser.

  // Test your AI system
  const results = await injector.runTests(yourAISystem);

???

Even the "prompt-injector" NPM package is something completely different. Does this project even exist?

HKayn · 2h ago

The project appears to be located inside the repo of the website: https://github.com/BlueprintLabIO/prompt-injector/tree/main/...

mosselman · 18m ago

What are some good prevention mechanisms for this? A sort of firewall for prompts? I've seen people recommend LLMs, but that seems like it wouldn't work well. What is the industry standard? Or what looks promising at least?

mkesper · 2h ago

The meat seems to be in https://github.com/BlueprintLabIO/prompt-injector/tree/main/..., the generation could be done without any UI but then it probably would not look so flashy.

HKayn · 2h ago

Why did you use something as heavy as SvelteKit for a website with a single page? This doesn't inspire confidence.

Google will allow only apps from verified developers to be installed on Android (9to5google.com)

Ask HN: The government of my country blocked VPN access. What should I use?

Gemini 2.5 Flash Image (developers.googleblog.com)

FFmpeg 8.0 (ffmpeg.org)

What are OKLCH colors? (jakub.kr)

Dissecting the Apple M1 GPU, the end (rosenzweig.io)

A German ISP changed their DNS to block my website (lina.sh)

Claude for Chrome (anthropic.com)

DeepSeek-v3.1 (api-docs.deepseek.com)

AI tooling must be disclosed for contributions (github.com)

Show HN: Base, an SQLite database editor for macOS (menial.co.uk)

A visual introduction to big O notation (samwho.dev)

Updates to Consumer Terms and Privacy Policy (anthropic.com)

Go is still not good (blog.habets.se)

Comet AI browser can get prompt injected from any site, drain your bank account (twitter.com)

We regret but have to temporary suspend the shipments to USA (olimex.wordpress.com)

U.S. government takes 10% stake in Intel (cnbc.com)

Waymo granted permit to begin testing in New York City (cnbc.com)

Monodraw (monodraw.helftone.com)

Ban me at the IP level if you don't like me (boston.conman.org)

Google has eliminated 35% of managers overseeing small teams in past year (cnbc.com)

Michigan Supreme Court: Unrestricted phone searches violate Fourth Amendment (reclaimthenet.org)

Altered states of consciousness induced by breathwork accompanied by music (journals.plos.org)

Scientist exposes anti-wind groups as oil-funded, now they want to silence him (electrek.co)

US Intel (stratechery.com)

Tesla said it didn't have key data in a fatal crash, then a hacker found it (washingtonpost.com)

Unexpected productivity boost of Rust (lubeno.dev)

Are OpenAI and Anthropic losing money on inference? (martinalderson.com)

Io_uring, kTLS and Rust for zero syscall HTTPS server (blog.habets.se)

Nx compromised: malware uses Claude code CLI to explore the filesystem (semgrep.dev)

How to build a coding agent (ghuntley.com)

What makes Claude Code so damn good (minusx.ai)

Framework Laptop 16 (frame.work)

Claude Sonnet will ship in Xcode (developer.apple.com)

Building the mouse Logitech won't make (samwilkinson.io)

Line scan camera image processing for train photography (daniel.lawrence.lu)

The Therac-25 Incident (2021) (thedailywtf.com)

Proposal to Ban Ghost Jobs (cnbc.com)

The GitHub website is slow on Safari (github.com)

I Am An AI Hater (anthonymoser.github.io)

Malicious versions of Nx and some supporting plugins were published (github.com)

Ask HN: Why hasn't x86 caught up with Apple M series?

A teen was suicidal. ChatGPT was the friend he confided in (nytimes.com)

Manim: Animation engine for explanatory math videos (github.com)

Everything I know about good API design (seangoedecke.com)

Uncertain<T> (nshipster.com)

We put a coding agent in a while loop (github.com)

95% of Companies See 'Zero Return' on $30B Generative AI Spend (thedailyadda.com)

Show HN: A zoomable, searchable archive of BYTE magazine (byte.tsundoku.io)

4chan will refuse to pay daily online safety fines, lawyer tells BBC (bbc.co.uk)

Show HN: A minimal TS library that generates prompt injection attacks

Comments (5)