A single GitHub issue could have hijacked Anthropic’s own Claude Code action and poisoned every project that uses it

The attack starts with a GitHub issue. Not a sophisticated one. Just an issue opened by a bot account with a carefully worded body that looks like an error message. When Claude Code’s GitHub Action picks it up for triage, it follows the instructions...