Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-01 · source-backed
Socket.dev disclosed a self-replicating npm worm with a McpInject module that creates fake MCP servers targeting Claude Code, Cursor, Windsurf, VS Code Continue, and Claude Desktop. At least 19 typosquatted packages were compromised. This is purpose-built malware targeting the AI toolchain.
Each link below shares sources, entities, or timing with this story.
Claude Code uses Claude Desktop / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses Claude Desktop); both cover Claude Code, Claude Desktop, Cursor, MCP; reported by the same outlet (socket.dev).
Linked by a graph relationship (Claude Code uses Claude Desktop); both cover Claude Code, Cursor, MCP, VS Code Continue; reported by the same outlet (socket.dev).
Claude Code uses Claude Desktop / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Claude Code uses Claude Desktop); both cover Claude Code, Claude Desktop, Cursor, MCP; overlapping topics (claude, code, cursor, desktop).
Claude Code uses Claude Desktop / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses Claude Desktop); both cover Claude Code, Claude Desktop, Cursor, MCP; overlapping topics (claude, code, cursor, desktop).
Claude Code uses Claude Desktop / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Claude Code uses Claude Desktop); both cover Claude Code, Cursor, MCP, Windsurf; overlapping topics (claude, code, cursor).
Linked by a graph relationship (Claude Code uses Claude Desktop); both cover Claude Code, Cursor, MCP, Windsurf; overlapping topics (claude, code, coding).
Claude Code uses Claude Desktop / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses Claude Desktop); both cover Claude Code, Cursor, MCP, Windsurf; overlapping topics (claude, code, coding).
Claude Code uses Claude Desktop / Shared entities / What happened next
Linked by a graph relationship (Claude Code uses Claude Desktop); both cover Claude Code, Claude Desktop, Cursor, MCP; picks up the Claude Code thread on 2026-03-15.