“The number of pull requests on GitHub is soaring to a level that suggests they are agentic, making it difficult for human review to catch malicious code.”