Read full article about: Claude Code runs a GitHub repo's hidden malware without verification, giving attackers full control Security researchers at 0DIN, Mozilla's GenAI bug bounty platform, found a ...