SymJack Attack Exploits AI Coding Agents to Compromise

Researchers identified the 'SymJack' attack, which uses malicious repositories and symlinks to trick AI coding agents into installing attacker-controlled MCP servers. This allows unauthorized access to secrets, CI pipelines, and code deployment.