AI coding agents on the command line: spotting them when they work for someone else
In 2025, an npm package asked Claude Code, Gemini CLI and Amazon Q to hunt for secrets on its behalf. Replayed in a lab: what process creation shows, two tested Sigma rules and a hunting query.