We audited Claude Code and confirmed RCE via environment variable injection

by zack-eth | View on Hacker News