AINewsnow

GitSpawn: Claude Code Runs Untrusted Repo Code Before You Type

This story is from 2026-09-08. It is preserved in the archive; the latest stories are on the live feed.

TL;DR A repository you were sent as a zip can run commands on your machine the second you open it with Claude Code, Cursor, Codex, Goose, Qwen Code, Grok Build or Hermes. No click, no prompt, nothing on screen. The repo's own .git/config names the command. Agents run git status in the background to…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-08 12:42 · DEV Community — AI
    GitSpawn: Claude Code Runs Untrusted Repo Code Before You Type

More stories

  1. I gave 6 different AIs the same 5 questions — r/AI_Agents
  2. M2 Mac ultra128gb Qwen flash next — r/LocalLLM
  3. Pay $39.99 once to put ChatGPT, Claude, Gemini, and more in a single workspace for life — Mashable AI
  4. The cloud outage that should terrify the CIO — InfoWorld AI
  5. Is it just me or does Qwen 2.1 look like a heavily distilled GTP image version? — r/StableDiffusion
  6. Using local/non-Anthropic LLMs in Claude Desktop on Windows? — r/ClaudeAI
  7. Ho creato un piccolo benchmark "test nascosti + revisione del codice" e l'ho eseguito su Claude Sonnet 5, Claude Opus 4.6 e una versione locale di Qwen 3.8 27B (Unsloth Q6 - Qwen3.8-27B-UD-Q6_K.gguf). Risultati + cosa li ha effettivamente differenziati — r/LocalLLM
  8. Getting more accurate results - personalizations — r/ArtificialInteligence

Get the daily brief of stories like this at 6:30 every morning →