Researchers have demonstrated a novel attack where a seemingly benign GitHub repository can trick AI coding agents into executing malicious payloads. The malware remains hidden from security scanners, AI agents, and human reviewers. This highlights a significant supply chain risk when AI agents are used to clone and set up repositories, potentially leading to compromise of development environments.