A single GitHub issue could have hijacked Anthropic’s own Claude Code action and poisoned every project that uses it
The attack starts with a GitHub issue. Not a sophisticated one. Just an issue opened by a bot account with a carefully worded body that looks like an error message. When Claude Code’s GitHub Action picks it up for triage, it follows the instructions hidden inside, reads the process’s environment…
No discussion yet. Be the first to share your thoughts!