Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

During compilation, the Preprocessor processes the source code (SRC) to eliminate comments and expand macros or includes. The cleaned code is then forwarded to the Compiler, which converts it into ...