Git identity spoof fools Claude into giving bad code the nod

Manifold Security demonstrated that an AI-driven code review system built on Anthropic's Claude can be tricked into auto-approving malicious commits by simply spoofing Git author name and email; automated workflows that grant trust based on commit metadata or perceived maintainer identity can be bypassed, creating a risk of supply-chain or repository poisoning unless additional controls (e.g., commit signing, independent checks) are enforced.