A attack using QR codes is known as "quishing," a combination of QR code and phishing. The danger isn't the QR code itself; it's where it quietly sends you.
Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
Federal authorities are offering a reward of up to $10 million for information leading to the identification or location of a ...