“With Git LFS enabled globally, this will print “PWNED” during the clone on case-insensitive file systems with support for symbolic links (such as NTFS, HFS+, etc).”
Windows and Mac file systems are case-insensitive out of the box. Add Git LFS and a clone runs the attacker’s hook. A git clone is supposed to be the safe step before you read the code. The fix went out across fourteen release lines, so check yours.