An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
Run dpkg -i coredns_0.9.10-0~9.20_amd64.deb. This installs the coredns binary in /usr/bin, adds a coredns user (homedir set to /var/lib/coredns) and a small Corefile /etc/coredns.