Researchers warn many AI coding assistants now execute commands from project configurations

'GhostApproval' problem highlights human-in-the-loop fails

HIBP claims leaked info includes bank account numbers, payout histories, and personal details