Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
Rafael Fiziev (156) vs. Manuel Torres (156) Sharabutdin Magomedov (186) vs. Michel Pereira (185.5) Matheus Camilo (156) vs. Nazim Sadykhov (156) Asu Almabayev (126) vs. Charles Johnson (125.5) Ikram ...