Exploit for Code Injection in Anthropic Claude_Code

dotclaude-security Scan a repo's local .claude/ confi...

EUVD-2025-23047

Malicious code in bioql PyPI...

CVE-2025-4674

The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VCS e.g. Mercurial...