Clean GitHub repo tricks AI coding agents into running malware

Attackers can create legitimate-looking GitHub repositories that contain hidden malicious payloads designed to execute when AI coding agents automatically clone and set up the code, bypassing both security scanners and human review. Organizations deployin