GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, and Others | Dark Hacker News