Manifold finds eight flaws where poisoned Git settings make seven AI coding agents run attacker commands.