An Infostealer Now Grabs .claude.json and Codex's config.toml. Check What Yours Hold

Symantec says Aoki now steals Claude, Codex, Cursor and Copilot credentials. Find the tokens your agent configs hold in plain text, and what to rotate.

Read Original

Related