Claude Code Opus 5’s Auto Mode can be tricked into running malicious code via a simple website-summary request, succeeding in ...
covering all the hot paths through the loop. the VM would start tracing there. When the inner loop exits, the VM would detect that a different branch was taken. The VM would try to record a branch ...