HomeAI · summaries
Storia in 6 fonti
Claude Code runs a GitHub repo's hidden malware without verification, giving attackers full control
Security researchers at Mozilla's 0DIN platform have shown how a single compromised GitHub repo can take over a developer's machine the moment an AI coding tool like Claude Code runs its setup. The catch: the malicious code only loads at runtime via a DNS query, invisible in the repo, to scanners, and to the AI agent itself.
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
bleepingcomputer.com
Clean GitHub repo tricks AI coding agents into running malware
An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a malicious payload that is invisible to both security agents and human reviewers.
- ·
tomshardware.com
AI coding agents can be tricked into installing malware via 'clean' GitHub repositories — Mozilla's 0din team shows how Claude Code can be…
Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.
- ·
hwupgrade.it
Repository GitHub 'puliti' possono ingannare Claude Code e gli agenti IA: Mozilla avverte sui danni
Il team di sicurezza 0DIN di Mozilla ha dimostrato come un repository GitHub apparentemente pulito possa indurre Claude Code e altri agenti di coding AI a installare un reverse…
- ·
the-decoder.com
Claude Code runs a GitHub repo's hidden malware without verification, giving attackers full control
Security researchers at Mozilla's 0DIN platform have shown how a single compromised GitHub repo can take over a developer's machine the moment an AI coding tool like Claude Code…
- ·
securityweek.com
Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines
Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
- ·
cryptobriefing.com
New attack exploits Claude Code to hijack developer machines through poisoned repositories
Mozilla's 0Din security team reveals how hidden prompts in Git repositories can trick Claude Code into opening reverse shells on developer machines.