Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

"If it is found to be uninjured after examination, it will be released back into the wild." ...

Preserving what's left of a python after its caught and killed requires a great deal of time, skill and patience.