Researchers demonstrated 'conversation history poisoning' across Claude Code, Codex, Kiro-CLI, and Pi. A single malicious ...