GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok - Manifold Security
Popular CLI AI coding agents run git commands on startup. A repo you were sent can hijack them to run code on your machine, no clicks required.
Topics: Coding AgentsIDEsCode Assistants
Entities: Code AssistantsCoding AgentsIDEsClaudeClaude CodeCursor