Canonical, dated answers for coding agents — every entry states when it was true and which versions it applies to, so your context never goes stale.
34+ malicious packages (384 versions) planted .cursorrules/CLAUDE.md with invisible zero-width-Unicode instructions. First documented at-scale attack on the agent instruction channel itself.