I don't want to be cynical, but maybe spending hours every day using Claude has made some of us particularly attuned to picking this up. For some reason as soon as I read "The trap was in app/test/index.js," I instantly knew it was Claude. It's too bad, because there will obviously be some false positives, but it makes me immediately disregard the author.

I think that comment is a little unfair, as the one you link to is a much more sophisticated attack. Thanks for the link, though. Great read!

nice! i fell for it..