Config files in repositories can execute code automatically when opened by development tools, potentially allowing attackers to run malicious code without the developer's awareness. Tools such as VS Code, Cursor, Claude Code, Gemini CLI, npm, Composer, and Bundler can read and act on these config files.

Using iTerm2, executing the command "cat readme.txt" can lead to arbitrary code execution. This vulnerability arises from iTerm2's legitimate features that inadvertently allow such exploits.