Malicious GitHub repos trick AI coding agents into executing hidden payloads

A new attack vector targets AI coding agents by embedding malicious code in GitHub repositories that appears benign to human reviewers. The malware executes only when the agent runs the code, bypassing traditional security scans. Researchers demonstrated the technique using a clean-looking repo that secretly downloads and runs a payload.