// AI tooling

MCP / AI tooling config theft

pattern: reads-mcp-config

Packages that read ~/.config/claude, ~/.cursor/, mcp_settings.json, or similar AI-coding-assistant configurations. Used to harvest API keys, local agent tooling secrets, and connected-tool credentials.

2 packages flagged with this pattern (7 total publish events, collapsed by publisher+name). Newest first.

• AUTO-PUBLISHED/npm/16h ago

  @mandujs/cli5 versions·0.44.12→0.44.16

  by oddeye

  Agent-Native Fullstack Framework - 에이전트가 코딩해도 아키텍처가 무너지지 않는 개발 OS

  steals →AI API keysMCP configChromium logins→ sends tohttps://github.com/konamgil/mandu.git

  public-github-pushchild-process-spawnreads-chromium-credsreads-env-vars
• AUTO-PUBLISHED/npm/16h ago

  @olonjs/cli2 versions·3.0.142→3.0.143

  by jps-dev

  The Sovereign CLI Engine for OlonJS.

  steals →MCP configChromium logins→ sends tohttps://github.com/olonjs/npm-jpcore#readme

  public-github-pushreads-mcp-configreads-homedirreads-chromium-credsreads-env-varsbase64-decode