thumbnail How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories