Topic analysis

Config Files That Run Code: Supply Chain Security Blindspot

A new software supply chain attack vector leverages ordinary-looking, automatically executed config files for IDEs, AI coding agents, and package managers to run malicious code on developer machines without prior warning, as observed in the Miasma worm campaign that compromised 121 GitHub repositories with a credential-stealing dropper. The advisory urges developers to review repository dotfiles and config files with the same rigor as application code, and provides guidance for pre-clone scanning to detect such threats.