Who approves the files that control your AI coding assistant?

Summary

StepSecurity revisited the June Miasma campaign in an October 8 analysis of agent-skill distribution. The campaign planted AI-tool and editor configuration in a Microsoft repository without modifying application source, aiming to trigger credential harvesting through developer tooling. The source argues that merging such configuration can distribute execution instructions to everyone working in the repository.

Topics

• Coding assistants

Related items

• InfoAnthropic reports $17 billion in Q3 revenue, purchase commitments of $895.4 billion in revised S-1Same vendor · CNBC Technology
• InfoMicrosoft's AI Risk Report Misses This Key DetailSame vendor · Dark Reading
• InfoStop counting tokens, start counting what shipsSame vendor · MIT Technology Review
• MediumTop AI coding agent security resources — November 2026Same vendor · Adversa AI Blog
• InfoThe biggest names in AI are backing a new way to opt out of scrapingSame vendor · The Verge (AI)