An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload that remains invisible to security scanners, AI agents, and human ...
Special thanks to the following publicly funded German projects for their financial support, which has contributed to this work: IHP Open130-G2 (16ME0852) https://www ...