Git Exploit Executes Arbitrary Code Before Agent Trust Prompts

Cybersecurity researchers identified an exploit vector affecting seven major AI coding agents where malicious repository hook scripts execute automatically prior to user confirmation prompts. Attackers embed deceptive configurations within cloned Git directories that trigger shell commands during initial workspace analysis before developers approve repository trust dialogs.