It looks like malicious source trees can mess up your repositories if you clone a project with the tree contained.

This only hits Case Insensetive OS’s, meaning Windows and Mac clients are at risk, not linux…

Get the details and the updates here