Here's a nightmare scenario you probably haven't considered: malware that hijacks your AI coding assistant. Henrik Plate and Amod Gupta from @endorlabs walk through a real attack where malicious code searched developer systems for Cursor, Claude, and Amazon's assistant. The entry point? A vulnerable GitHub Actions workflow. The twist? That workflow was written by an AI agent. Joel's reaction captures it perfectly: "That's wild. I never even thought of that as the attack vector, just getting into