An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a malicious payload that is ...