MCP becomes the top attack surface in developer tooling

A report details attacks on the Model Context Protocol: the Miasma worm infected SessionStart hooks in 13 AI coding tools via npm packages, Anthropic's SDKs pass config to STDIO without sanitization, and Trend Micro found 1,467 exposed MCP servers. Flaws in Cursor, Claude Code, Gemini CLI and Amazon Q enable RCE.

• Miasma worm hit 32 npm packages and hooks in 13 AI tools, including Claude Code and Copilot
• Anthropic SDKs pass config to STDIO unsanitized, affecting 7,000+ servers
• Trend Micro found 1,467 exposed MCP servers, up from 492 months earlier
• CVEs in Cursor, Claude Code and Amazon Q allow RCE when opening a repo