Decades-old Bash tricks bypass safeguards in AI coding agents

Wiz disclosed GhostApproval attack; Adversa AI found GuardFall in 10 of 11 tested open-source agents. Tricks like $IFS spacing can exfiltrate credentials or wipe environments via poisoned repos.