Researchers discovered a method for malicious tool servers to exfiltrate sensitive data like SSH keys, environment secrets, and source code from AI coding assistants. By splitting harmful instructions into routine-looking fragments and sending them through existing communication channels, attackers can bypass security checks. This highlights a novel supply chain risk in AI-driven development environments.