Il worm Miasma si attivava aprendo i progetti in VS Code, Cursor, Claude Code o Gemini CLI. Microsoft ha avvisato alcuni utenti potenzialmente coinvolti

GitHub disabled 73 Microsoft repos after the Miasma worm exploited previously compromised credentials to plant malware targeting AI coding agents.

Miasma worm shapeshifts, but cloud secret-scouting remains the goal