The Config File Your Agent Loads Automatically Is the Next Attack Surface — and the Miasma Worm Proves It
Config-file trust exploitation bypasses every prompt-level defense because the attack executes before the agent begins processing user input. The Miasma worm planted five files across four AI coding agents and disabled 73 Microsoft repositories in 105 seconds.