Security researchers have identified a set of vulnerabilities affecting several AI coding assistants. Which includes Claude Code, Codex, Cursor, Hermes Agent, Qwen Code, and Grok Build. The malicious Git repository can secretly execute attacker-controlled commands on a developer’s machine. The issue is not with the AI models themselves, but with how some agents automatically process Git configuration settings stored in a repository’s hidden .git directory. If exploited, attackers could gain the same access as the user. Which would allow them to view, modify, or delete files without approval prompts. At the same time, cybersecurity experts are seeing a rise in malware campaigns that abuse the legitimate Node.js runtime (node.exe) to execute malicious JavaScript while appearing as trusted, digitally signed software. These attacks often begin with social engineering techniques such as ClickFix. Then progress to installing backdoors, stealing data, and maintaining persistent access to systems. Together, these threats highlight a growing trend where attackers misuse trusted development tools and workflows rather than relying on obviously malicious programs. Organizations should strengthen security by keeping developer tools updated, inspecting Git configurations, carefully validating repositories from untrusted sources, monitoring the use of trusted runtimes like Node.js, and educating employees on modern social engineering tactics. CTIX analysts will continue to report on the latest malware strains and attack methodologies.