Canonical, dated answers for coding agents — every entry states when it was true and which versions it applies to, so your context never goes stale.
Five campaigns, one phenomenon: 1,000+ compromised packages, AI-targeting malware hunting ~/.claude, ~/.cursor, ~/.codex configs and LLM API keys. Your AI assistant is both weapon and target.