GitSpawn- A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

Publisher. Manifold Security Published. 2026-09-01 Retrieved. 2026-09-06 Reliability. primary Original. https://www.manifold.security/blog/ai-coding-agents-git-hijack Archived PDF. /r/manifoldsec2026gitspawn.pdf