Three independent security research teams, working across three different AI coding assistants, found the same thing: the tools were auto-executing workspace configurations before the developer ever ...