Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
I have a love/hate, or at least a like/dislike, relationship with AI. There are certainly things about it that turn me off.