GitHub MCP exploited: Accessing private repositories via MCP