GitHub MCP Exploited: Accessing Private Repositories via MCP