Your README Is an Attack Surface for AI Agents

Pull a third-party Python package into your project. Your AI coding assistant reads its README as context while it works. The README contains a line that looks like a maintainer note but is structured