Your agent ran git. So did the repo
On October 2, Manifold Security published GitSpawn, and it is the kind of bug that is obvious the second you see it and invisible until then.
Coding agents call git all the time. Not when you ask them
reado.hashnode.dev5 min read