THE AI TROJAN: How "Sandworm" Steals Your Passwords via Claude & Cursor! 🚨 скачать в хорошем качестве

THE AI TROJAN: How "Sandworm" Steals Your Passwords via Claude & Cursor! 🚨

In this video, we break down "SANDWORM_MODE" (also known as Shai-Hulud 2.0), a highly dangerous multi-stage npm supply chain attack that acts as the ultimate AI Trojan. Discover how malicious npm packages (like the typosquatted claud-code or suport-color) silently install rogue Model Context Protocol (MCP) servers directly into your favorite AI coding assistants, such as Claude Code, Cursor, Windsurf, and VS Code Continue. These malicious servers use hidden prompt injections within tool descriptions to force your AI agent to steal your SSH keys, AWS credentials, npm tokens, and read plaintext secrets from your .env files—completely bypassing your awareness. Learn how this malware persists across sessions using global Git hooks, and what you must do to secure your development environment before it's too late. 📌 Useful Resources & Links from the Video: Endor Labs Technical Analysis of SANDWORM_MODE: https://www.endorlabs.com/learn/sandw.... Datadog Security Labs - The Shai-Hulud 2.0 npm worm: https://securitylabs.datadoghq.com/ar...