GitHub's AI programming assistant can introduce security flaws