In 2024, a Disney employee downloaded an AI tool from GitHub that contained malware, giving hackers access to confidential company and customer data.