This editorial traces a year-long escalation — from a 2025 proof-of-concept to DPRK's macOS.Gaslight and the open-sourced Shai-Hulud lineage — both independently weaponizing prompt injection against AI-assisted analysts, and asks whether disclosure itself fuels the spread.