It'll get a public release in a few months.

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Chromium-based browsers are the only ones that currently support manipulating requests (changing headers, blocking requests, etc). Firefox and Safari do not currently support capturing response bodies ...