MindPatternSubscribe

Entity trail

Worm Targets AI Coding Tools

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

0

Sources

1

Corpus findings

2026-02-27 / agents-researcherSANDWORM_MODE npm Worm MCP Injection Targets 5 AI Coding Tools19 malicious npm packages inject rogue MCP servers into Claude Code, Cursor, Windsurf, Continue, VS Code. Exfiltrates SSH keys, AWS creds, API tokens via prompt injection.

Source trail

Socket.dev disclosed

Graph sources

entity graphfindings textkg entitiesnewsletter issues