indicatorfilename
.claude/setup.mjs
- First seen
- 2026-05-15
- Last seen
- 2026-05-15
- Sightings
- 1
Posts referencing this indicator
- Mini Shai-Hulud: The Worm Returns and Goes Public
Malicious script dropped to establish persistence via Claude Code session hooks.