How Can a Trusted AI Coding Tool Run Malicious Code Without Being Asked To?

You clone an open-source project you found online. The repository looks legitimate, a few hundred stars, a reasonable README, some issues and pull requests. You open it in your editor and ask your AI coding assistant to track down a bug in one of the utility files. The agent gets to work. It reads

Der Artikeltext wird beim nächsten Sync nachgeladen. Original bei dev.to lesen