AIQB
TutorialsOrdinary

An Infostealer Now Grabs .claude.json and Codex's config.toml. Check What Yours Hold

Source: DEV Community·

Summary

Symantec says Aoki now steals Claude, Codex, Cursor and Copilot credentials. Find the tokens your agent configs hold in plain text, and what to rotate.
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-6332d0da59682ce9ccafc382