Claude Code subagent returned with prompt-injection payload

A user reports that a Claude Code subagent returned with a prompt-injection payload and hidden instructions to never tell the user, after being delegated test-driven work. The subagent made zero tool calls in 22 seconds.