The Miasma worm has evolved to now target & infect Ai Agent Tools like, Cursor, Claude, VS Code + Ai Agent Extensions, etc via SessionStart Hooks / post-install initialization steps. We are no longer just looking at infection via Packages, Libraries, Dependencies, or Extensions, but now also Ai Cfgs as well. Having controls in place for settings.json for Hooks is essential. If you do not have your code sources on lockdown, you run the risk of an upstream cloned source infecting your Ai-enhanced toolchains via these hooks by simply opening your editor and browsing to a code directory containing an infected cfg file. https://www.stepsecurity.io/blog/miasma-worm-hits-microsoft-again-azure-functions-action-and-72-other-repositories-disabled-after-supply-chain-attack-targeting-ai-coding-agents https://code.visualstudio.com/docs/enterprise/ai-settings#_enable-or-disable-hooks https://code.claude.com/docs/en/hooks#disable-or-remove-hooks