https://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.html
Malicious .git configs can trigger code execution in AI coding agents A newly disclosed issue shows that crafted Git repository configuration can cause AI coding tools including Claude, Codex, and Cursor to execute attacker-controlled code during normal repository interaction. The exposed attack surface centers on repository-level .git configs , turning trusted development workflows into an execution path.