Claude Code Executes Hidden Malicious Code Upon Opening GitHub Repo, Attacker Can Gain Full Control
Security researchers at Mozilla's 0DIN platform have shown how a single compromised GitHub repo can take over a developer's machine the moment an AI coding tool like Claude Code runs its setup.
Return to original text
A short introduction is retained here; the full text from the source website is not reposted. For specific wording and subsequent updates, please refer to the original article.
Open original at the-decoder.com