We found two Claude Code exploits that run commands you never approved - hidden by invisible terminal characters or slipped past your own deny rules.
.jpg)
