AI coding agents can be tricked into installing malware via 'clean' GitHub repositories — Mozilla's 0din team shows how Claude Code can be exploited by its own helpfulness
…However, there's a fake Axiom startup script that will simply error out the first time it's run. This is the first step that tricks the box, because in order to…