Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-16 · source-backed
MIT-licensed desktop app and CLI that auto-detects installed AI clients and manages MCP server configuration for all of them — Claude Code, Claude Desktop, Cursor, VS Code, Windsurf, ChatGPT Desktop, Gemini CLI. Built-in MCP marketplace, team snapshot export, automatic backups. Solves config drift. OpenPR
Each link below shares sources, entities, or timing with this story.
The Amazon Q bug is one instance of a 2026 pattern: MCP configuration carried in repositories is now an RCE supply-chain vector, not just untrusted tool output. Cursor, VS Code, Windsurf, Claude Code, and Gemini-CLI are all vulnerable to MCP-based auto-launch attacks (Windsurf...
Sub-minute audit of all MCP servers across Claude Desktop, Cursor, Claude Code, Gemini CLI, and Windsurf. Maps to OWASP MCP Top 10. Invariant Labs
xAI launched Grok Build on May 14. With that, every major AI lab now ships a coding agent that lives in your terminal. The competition isn't "can we build one" anymore. That question is settled. The lineup: Anthropic has Claude Code. OpenAI has Codex CLI. Google has Gemini CLI...
Socket.dev disclosed a self-replicating npm worm with a McpInject module that creates fake MCP servers targeting Claude Code, Cursor, Windsurf, VS Code Continue, and Claude Desktop. At least 19 typosquatted packages were compromised. This is purpose-built malware targeting the...
Pomeroy v1, posted to Show HN September 8, is a menu-bar app that holds the system permissions and serves nine native apps (Mail, Calendar, Reminders, Notes, Contacts, iMessage, Maps, Shortcuts, Weather) over MCP to 20+ clients including Claude Desktop, Claude Code, Cursor, VS...
The IDE market is fragmenting, and this week drew the sharpest lines yet. Cursor 3 launched as a rebuilt agent-orchestration platform in Rust and TypeScript, replacing the VS Code fork with an Agents Window for dispatching and monitoring multiple AI coding agents. Anysphere hi...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.