Miasma Worm AI Coding Tool Credential Access (Claude/Cursor/Gemini)

Ibrahim Saud@tektrix

•updated Jun 25, 2026•1•0•4

Detects unauthorized access to sensitive credential and configuration files associated with AI development tools (Cursor, Claude, Gemini) and cloud providers (AWS, GCP) by the Miasma worm, which seeks to steal environment configuration and authentication data.