GitHub AI agent leaks private repos when asked nicely

Malicious prompters could easily trick GitHub agents into pulling data from private repositories and then leaking the information as a public comment for anyone to access, according to Noma Labs ...

Published: 2026-07-07