Your agents answer to Hades: how one commit hijacks 4 AI coding tools

Hades is a self‑propagating supply‑chain worm that leverages committed, auto‑executing configuration for AI coding tools (Claude Code, Gemini, VS Code, Cursor, etc.) to run a Bun‑based credential stealer when a developer opens a repository. Using a single stolen GitHub token it commits hooks into repositories the victim can push to, enabling widespread propagation, memory scraping of runner processes, OIDC/provenance abuse for package publishing, and a destructive wiper that triggers if stolen tokens are revoked; the report includes static analysis of a samuelrizerio/setup dropper, file hashes, repo naming patterns, mitigations, and detection guidance.