API key theft

Ever opened a Git repo just to “take a quick look”? In AI-powered development environments, that casual click can be enough to trigger remote code execution and silently exfiltrate your API keys—without you ever hitting “run.” That’s the unsettling reality highlighted by new research into Claude Code, which, according to The Hacker News, patched three…