Six AI code assistants fail to validate symlinks before write operations, allowing attackers to manipulate system configurations through fraudulent project files — some vendors have already patched, others are still working on fixes.
Miasma replicates autonomously across Git repositories and automatically deletes user data when its GitHub token is blocked, with the now-public source code expected to lead to further variants.
