Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines