AI coding agents can be tricked into installing malware via ‘clean’ GitHub repositories — Mozilla’s 0din team shows how Claude Code can be exploited by its own
Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.








