Clean GitHub repository can trick AI agents into running malware

Researchers from Mozilla’s 0DIN AI security platform demonstrated a concept in which Claude Code may execute a malicious command chain while cloning and setting up an apparently benign GitHub project. The method requires neither malicious code in the repository nor a suspicious command approved by the user.