Friendly Fire attack tricks AI code scanners into running malicious code

Proof-of-concept 'Friendly Fire' attack by AI Now Institute can trick AI coding agents like Anthropic's Claude Code into executing attacker's code while scanning for vulnerabilities. The attack exploits the agent's ability to run code from the repository being analyzed.