The incident began with an unsuspecting GitHub issue submitted by a bot account. This issue, deceptively crafted to look like a simple error report, triggered Claude Code’s GitHub Action during triage. Once activated, the action executed instructions concealed within the issue, grabbed sensitive environment variables from the process, and transmitted them externally.
Back
