Claude Code obediently runs a repo's hidden DNS malware and hands the attacker the keys
Ourtake
The agent saw a routine error, ran the script without checking it, and the attacker got a shell.
What happened
Researchers at 0DIN, Mozilla's GenAI bug bounty platform, found that a GitHub repository's setup script pulls a command from a DNS entry and runs it. When Claude Code hit a routine error during setup, it ran the script, which opened a reverse shell to an attacker able to take API keys and credentials. The researchers recommended that agents show setup scripts before running them.