Claude Code Gets Plugin-Pwned: Malicious Marketplace Tricks Claude Into Mailing Your Codebase to a Stranger

What happened

PromptArmor researchers demonstrated that a malicious Claude Code plugin marketplace could use hooks to bypass Claude's human-in-the-loop permission prompts. Prompt injection then led Claude to run curl and send the user's codebase data to an attacker-controlled server. The attack was shown in testing.