Clean GitHub repos trick AI coding agents into malware

Mozilla's 0din team demonstrated that Claude Code can be tricked into installing malware by initializing a clean GitHub repository. The attack uses three benign components that together give an attacker an interactive shell with the developer's privileges, accessing secrets, API keys, and passwords.