StepSecurity Dev Machine Guard

Reported Context (3)

Or find OpenCode with the open source Dev Machine Guard. StepSecurity Dev Machine Guard is open source and free for community users. It scans a developer machine for AI coding agents, MCP servers, IDE extensions, and OpenCode Says Breach Affected 1.4% of Console Users With Linked AI Providers
Developer machines. Dev Machine Guard can detect the compromised npm packages installed on developer laptops and the suspicious files this campaign drops. The credential stealer targets workstations directly, so this is StepSecurity Details Import-Triggered RAT in Compromised Joyfill npm Packages
to enforce network egress allowlists and detect anomalous network traffic. - Deploy StepSecurity Dev Machine Guard for real-time visibility into npm packages installed on developer devices. Compromised Axios npm Releases Deliver Cross-Platform RAT

MITRE ATT&CK (15)

Vendors (6)

Products (13)

Tools (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.