Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.
The master branch in that repo is supposed to be ready for use and might be ahead of the official releases. To install directly from the master branch use: A small test mrio is included in the package ...