Claude Code RCE via malicious .claude/settings.json hooks (CVE-2025-59536)

rule jiffy_ti_2026_000120
{
    meta:
        source = "jiffy-intel"
        severity = "critical"
        description = "Auto-generated from Jiffy Intel indicators"
    strings:
    $file_path_pattern_0 = ".claude/settings.json"
    $file_path_pattern_1 = ".mcp.json"
    $artifact_uri_pattern_2 = "%/.claude/settings.json"
    $artifact_uri_pattern_3 = "%/.mcp.json"
    $content_pattern_4 = "(?i)\"hooks\"\\s*:\\s*\\[[^\\]]*\"command\"\\s*:"
    $content_pattern_5 = "(?i)pre[-_]?(tool|bash|edit)[-_]?use"
    condition:
        $file_path_pattern_0 or $file_path_pattern_1 or $artifact_uri_pattern_2 or $artifact_uri_pattern_3 or $content_pattern_4 or $content_pattern_5
}

Auto-generated from the indicators above. Adapt syntax for your detection stack before deploying.