Clean GitHub repo tricks AI coding agents into running malware June 28, 2026 An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload