Dossier
RyotaK
Coverage of RyotaK in the Nexus archive.
- Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories
A security researcher discovered a flaw in Anthropic's Claude Code GitHub Action that allowed attackers to hijack vulnerable public repositories by opening a single GitHub issue. The vulnerability could have enabled malicious code to be pushed into Anthropic's own action repository and downstream projects.