Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
They are, rightly, some of the most read writings from the ancient world. The second category of writing was the 600-1,000 ...