Mozilla 0DIN’s Claude Code demo shows how clean GitHub repos can expose AI coding agents to prompt injection, reverse shells, ...
Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.