Add dependency malware checker hook for Claude Code

[John-David Dalton (jdalton)]

Summary

• Adds a Claude Code PreToolUse hook that intercepts Edit/Write tool calls to dependency manifest files across 17+ ecosystems (npm, PyPI, Cargo, Go, Maven, etc.)
• Checks new dependencies against Socket.dev's malware API before they're added
• Uses SDK v4 checkMalware() with batch chunking, namespace-aware matching, and in-memory caching
• Includes comprehensive test suite covering all supported ecosystems

Files

• .claude/hooks/check-new-deps/ - Self-contained hook with pinned deps
• .claude/settings.json - Hook registration for Edit/Write interception
• .gitignore - Updated to track .claude/hooks/ and .claude/settings.json

Test plan

• Verify cd .claude/hooks/check-new-deps && npm install succeeds
• Verify cd .claude/hooks/check-new-deps && node --test test/extract-deps.test.mts passes
• Verify Claude Code blocks edits that add known malware packages
• Verify Claude Code allows edits with clean packages

[socket-security-staging]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​socketsecurity/​sdk@​4.0.0

View full report

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​socketsecurity/​sdk@​4.0.0

View full report