Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.

Abstract: Generative artificial intelligence has become the focus of the intelligent education field, especially in the generation of personalized learning resources. Current learning resource ...