Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-14 · source-backed
The Miasma/Hades campaign, mutating delivery every 48–72 hours since June 1, added an agent-specific vector: packages that inject .cursorrules and CLAUDE.md files containing zero-width Unicode hidden instructions (Phoenix Security). Open the project in Cursor or Claude Code, the assistant reads the invisible config as legitimate guidance, runs a "security scan," and exfiltrates your local secrets. Socket flagged 37 malicious wheels across 19 PyPI packages on June 7 and a compromised ensmallen 0.8.101 on June 8. Your agent config files are now executable attack surface. Scan them for zero-width characters before trusting a pulled repo.
Each link below shares sources, entities, or timing with this story.
Cursor uses MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Cursor uses MCP); both cover Claude Code, Cursor, Socket; overlapping topics (claude, code, compromised, packag).
Cursor benchmarked against Codex / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor benchmarked against Codex); both cover CLAUDE, Claude Code, Cursor; overlapping topics (agent, agent-specific, claude, code, config).
Cursor benchmarked against Codex / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Cursor benchmarked against Codex); both cover Claude, Claude Code, Cursor; overlapping topics (agent, claude, code).
Cursor benchmarked against Codex / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor benchmarked against Codex); both cover CLAUDE, Claude Code, Cursor; overlapping topics (agent, claude, code, instruction).
Claude Code competes with Cursor / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code competes with Cursor); both cover CLAUDE, Claude Code, Cursor; overlapping topics (agent, claude, code).
Claude Code competes with Cursor / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code competes with Cursor); both cover Claude, Claude Code, Cursor; overlapping topics (agent, claude, code, config).
Cursor benchmarked against Windsurf / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor benchmarked against Windsurf); both cover CLAUDE, Claude Code, Cursor; overlapping topics (agent, claude, code, config).
Cursor supports Claude / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor supports Claude); both cover Claude, Claude Code, Cursor; overlapping topics (agent, claude, code).