Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks

Most open-source AI coding agents are vulnerable to GuardFall, a structural flaw that allows attackers to bypass command execution safeguards using decades-old Bash tricks. Malicious commands embedded in poisoned repositories, READMEs, or Makefiles execute with full developer privileges when agents ingest the content. This enables credential theft, code injection, and environment compromise across the supply chain.