Il team di sicurezza 0DIN di Mozilla ha dimostrato come un repository GitHub apparentemente pulito possa indurre Claude Code e altri agenti di coding AI a installare un reverse shell, sfruttando la loro disponibilit� ad aiutare

An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a malicious payload that is invisible to both security agents and human reviewers.

Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.