A single GitHub issue could have hijacked Anthropic’s own Claude Code action and poisoned every project that uses it
The attack starts with a GitHub issue. Not a sophisticated one. Just an issue opened by a bot account with a carefully worded body that looks like an…
