Claude Code Token Compromise & Hook Hijacking: Auditing CVE-2026-21852

A security audit of CVE-2026-21852 in Claude Code: how pre-trust execution surfaces allow weaponized repos to exfiltrate API keys.