Claude Code reportedly ships TypeScript “mods” without a sandbox · Digg