Tracked topic
The researchers found hallucinated names were consistent across tools built on different underlying models, including Cursor, Windsurf, GitHub Copilot, Cline, Gemini CLI, and OpenClaw. This is a pattern in how agents are built and permissioned, not a flaw isolated to one vendor. Sponsored and written by ActiveState.
Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack… In a report this week, software supply chain management company Cloudsmith concluded that Microsoft's Azure environment on GitHub and the 'durabletask' repository were compromised via Miasma, which targeted AI coding tools e.g., Claude Code, Gemini CLI, VS Code, Cursor . …
… The malware has previously been linked to high-profile attacks against Red Hat npm packages and, more recently, 73 Microsoft repositories on GitHub . Researchers at SafeDep reported yesterday that the Miasma source code was leaked on GitHub via numerous compromised developer accounts. …
… "One of our developers was compromised by a recent supply-chain compromise on Tanstack, which leaked their GitHub credentials through the GitHub CLI gh . This allowed the attacker to run workflows on our GitHub repository as a contributor," the NX team said. …
… They tested multiple prompts across Cursor, Windsurf, GitHub Copilot, Cline, Gemini CLI, and OpenClaw. …
… Get the whitepaper Related Articles: New CrashStealer malware poses as Apple crash reporting tool Nearly 300 GitHub repos pose as legit software to push malware Critical SimpleHelp flaw exploited to deploy new stealer malware Steam Workshop abused to spread malware via Wallpaper Engine app New Shai… …