techl8

Git identity spoof fools Claude into giving bad code the nod

Forged metadata made AI reviewer treat hostile changes as though they came from known maintainer Security boffins say Anthropic's Claude can be tricked into approving malicious code with just two Git commands by spoofing a trusted developer's identity.…

Source: The Register · Opens in new tab