AI Agent or IDE Autostart Hook Written by Node or Bun
Detects a Node or Bun process writing to Claude Code or VS Code autostart configuration. The keyv/cacheable campaign plants a SessionStart hook in .claude/settings.json and a folderOpen task in .vscode/tasks.json inside the trojanised source repository. Both execute the stage-1 loader when a developer or an AI coding agent opens the cloned repo, with no npm install required - so lockfile pinning and registry blocking do not cover this path. Note: this is the highest-value rule in the set for the agentic AI estate. It is also the one most likely to need tuning, since tasks.json is legitimately written by many tools.
Sigma
