A single GitHub issue could have hijacked Anthropic’s own Claude Code action and poisoned every project that uses it (opens in new tab)

The attack starts with a GitHub issue. Not a sophisticated one. Just an issue opened by a bot account with a carefully worded body that looks like an error message. When Claude Code’s GitHub Action picks it up for triage, it follows the instructions hidden inside, reads the process’s environment variables, and writes them back […] at The Next Web