Friendly Fire tricks AI code-security agents into running malicious code

The AI Now Institute's proof-of-concept, disclosed Wednesday, shows its "Friendly Fire" attack can hijack AI agents that scan open-source code for vulnerabilities, causing them to execute the attacker's code instead. The attack works against Anthropic's Claude Code.