Technique implemented in EvilClippy: https://github.com/outflanknl/EvilClippy
Hide all macro modules (except the default "ThisDocument" module) from the VBA GUI editor. This is achieved by removing module lines from the project stream [MS-OVBA 2.3.1].
Solution: compare modules in dir stream vs. lines in project stream
This should raise a warning.