Your AI Coding Agent Has Your Credentials
Through 2026, researchers turned pull request titles and issue bodies into instructions that AI coding agents obeyed — leaking tokens and, in one case, compromising a published npm package. Here is what happened, and why patching the agent does not fix it.