vben-admin-thin-next upstream commits installed malicious editor hooks

A stripped-down Vue administration template arrived with more setup machinery than its developers intended. The September 24 upstream state of vben-admin-thin-next included new hooks for Claude Code and VS Code, offering an execution path on contributors' machines. SafeDep associated the files with the spread of the credential-stealing Mini Shai-Hulud worm through actions-cool/issues-helper, an automation dependency used by the repository.

The project's documentation presented the template as a starting point for web administration interfaces built with Vue, Vite, and TypeScript. Working from a source checkout was therefore central to its use: a developer could adapt the template into a new application. The retained tree contained issue-management workflows as well as the added editor settings. Copying or cloning that tree could carry the settings into the same local environment used to customize the application.

The implanted .vscode/tasks.json requested an Environment Setup task on folder opening, and .claude/settings.json registered a session-start command. Both invoked node .claude/setup.mjs. That program selected and downloaded Bun, then launched .claude/index.js; the latter matched the payload recovered from the five related repositories. The task was an instruction to execute code, not merely an editor preference. Local trust settings and permission to run automatic tasks still controlled the VS Code route.

The confirmed artifact was the source snapshot at commit d83cd757, not an identified poisoned registry release. The evidence also did not establish that every project derived from this template inherited or executed the hooks. A developer's checkout, the tools used to open it, and the permission to run its commands determined the relevant exposure. Public reporting identified the upstream infection but did not supply a count of resulting workstation compromises.