‘GitLost’: researchers tricked GitHub’s AI agent into leaking private repos