A vulnerability known as GitLost has been reported, allowing github's ai agent to leak private repository data. The ai agent can be tricked into exposing private information through various means, including prompt injection attacks and potentially by being asked in a certain way. The nature and extent of the vulnerability and its potential connection to other security issues, such as malware spread, are not entirely clear.