Comment by kirby88

I had the same reaction as you... it looks like the vulnerability is coming from git, that's a very dangerous behavior.