Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-22 · source-backed
Help Net Security documents how infostealer malware — previously designed for browser credential theft — is being adapted to harvest agent configuration files, MCP server tokens, and stored API keys. Agent credentials carry far greater blast radius than human credentials: a stolen token triggers automated file access, API calls, and code execution at machine speed. Source
Each link below shares sources, entities, or timing with this story.
Claude Code uses MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover Agent, MCP; overlapping topics (agent, code).
MCP uses OAuth / Shared entities / Shared topic / What happened next
Linked by a graph relationship (MCP uses OAuth); both cover Agent, MCP; overlapping topics (agent, code, credential).
Claude Code uses MCP / Shared entity: MCP / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; reported by the same outlet (helpnetsecurity.com).
Anthropic released MCP / Shared entity: MCP / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released MCP); both cover MCP; overlapping topics (access, agent, browser, code).
Microsoft supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover Agent, MCP; overlapping topics (access, agent).
Claude Code uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses MCP); both cover Agent, MCP; overlapping topics (agent, code).
OpenAI supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (OpenAI supports MCP); both cover Agent, MCP; overlapping topics (agent, call).
Windsurf uses MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Linked by a graph relationship (Windsurf uses MCP); both cover MCP; overlapping topics (code, config, configuration).