here's a detection #osquery for #macos, in case it helps anyone
gist.github.com/RichardoC/9753…
#compromisedVScodeExtension
#claude
#detection
detect-compromised-claude-vscode-extension-macos-2026-10-26
detect-compromised-claude-vscode-extension-macos-2026-10-26 - detect-claude-code-vsx-backdoor-macos.sqlGist
