Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

As a consultant, I spend a lot of time in PowerPoint. Data doesn’t drive decisions, narrative does, and, love it or hate it, ...