AI coding agents can be hijacked by a clean‑looking GitHub repo delivering hidden malware
Researchers discovered a GitHub repository that appears legitimate but hides a malicious ZIP in its releases. When AI‑powered coding tools such as Claude Code, Gemini CLI, or Cursor clone the repo and run the setup script, the hidden payload executes without triggering scanners, giving attackers silent code execution on developer machines. The technique exploits the agents’ automatic dependency installation and could affect any project that relies on AI‑assisted code generation.