GitSpawn: Untrusted repos can execute code via AI coding agents
What happened
Popular CLI AI coding agents run git commands on startup. A repo you were sent can hijack them to run code on your machine, no clicks required.
Summary assembled by rule from the sources below