The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
X now hosts its own MCP server, letting AI tools like Claude, Cursor, and Grok connect to the platform's API without developers building the integration.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results