AI coding agents vulnerable to stealthy malware execution via GitHub

Security researchers have demonstrated a new attack method that tricks autonomous AI coding agents into executing malicious payloads from seemingly clean GitHub repositories. The technique exploits the agent's goal-oriented behavior, where it automatically attempts to resolve setup errors by running suggested initialization commands. Because the...

Read the full article at the source.