"Our partners have allowed us to trial these things that may sound a little crazy." ...
A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
Most of them replaced something you'd pay for ...
Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.