Topic

#Cursor

3 articles on Cursor — news, releases, guides and analysis from the DevClubHouse engine.

Config Files That Run Code: The Supply Chain Blind Spot Nobody Is Auditing

The Miasma worm didn't need a malicious dependency. It used .claude/settings.json, .vscode/tasks.json, and package.json to detonate a credential stealer — before you read a single line of code.

Ji-ho Choi

Lathe Wants LLMs to Teach You, Not Do the Work for You

A new Go CLI called Lathe flips the usual LLM workflow: instead of asking the model to write your code, you ask it to generate a hands-on tutorial — then you work through it yourself.

Article · 6d ago0

Config Files That Run Code: The Supply Chain Blindspot You're Probably Not Auditing

The Miasma worm hid a credential-stealing dropper inside ordinary config files for VS Code, Cursor, Claude Code, Gemini CLI, npm, Composer, and Bundler. Here's exactly how each vector works — and what to review before you clone.

Article · 6d ago0