#developer safety

Claude Code runs a GitHub repo's hidden malware without verification, giving attackers full control

Security researchers reveal how a compromised GitHub repo can hijack a developer's machine through AI coding tools like Claude Code, exploiting hidden malware that activates at runtime.