Indirect Prompt Injection Lets Claude Code Hijack Your Machine from a Clean Repo
Researchers Andre Hall and Miller Engelbrecht show how Claude Code can be tricked into opening a reverse shell by chaining a benign README, Makefile and test file, with the actual payload fetched from a DNS TXT record at runtime. The attack demonstrates full system compromise without any malicious code in the repository.