Malicious repositories can trigger code execution in Claude Code, Cursor CLI, Gemini CLI, and CoPilot CLI with minimal or no user interaction.
  • CameronDev@programming.devEnglish
    22 days

    This feels like a nonissue. There are dozens of ways an untrustworthy repo can cause code execution, from this to build.rs.

    Expecting Claude to list every possible risk is a bit silly.