Claude Code Executes Hidden Malware from Compromised GitHub Repos

Security researchers demonstrated that a compromised GitHub repository can compromise a developer's machine when processed by an AI coding tool such as Claude Code. The malware activates only at runtime through a DNS query, remaining undetected in the repository files and by both scanners and the AI agent. This approach allows attackers to gain full control without triggering standard verification processes.