AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...
This is a bit hacky and searches for repos containing the string .duckdb_extension, so it's not 100% reliable. Extensions that are not included in the DuckDB core (and are not listed in the output ...