Security researchers disclose critical vulnerabilities in Anthropic’s Claude Code that allow remote code execution and credential theft.