🤖 Mandiant: an attacker hijacked an active AI coding-assistant session at an SaaS provider, then spread the Shai-Hulud worm across ~100 internal repos. The worm stole repository secrets and source code; a poisoned package recommended by the assistant was accepted.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
🤖 Mandiant: an attacker hijacked an active AI coding-assistant session at an SaaS provider, then spread the Shai-Hulud worm across ~100 internal repos. The worm stole repository secrets and source code; a poisoned package recommended by the assistant was accepted. 🔗 https:// thehackernews.com/2026/09/atta cker-hijacks-ai-coding-assistant.html # AI # SupplyChain # Malware # InfoSec
🤖 Mandiant: an attacker hijacked an active AI coding-assistant session at a SaaS provider, then used it to spread the Shai-Hulud worm across ~100 internal repositories. The assistant had recommended the poisoned tooling; the worm stole secrets and source code. 🔗 https:// thehackernews.com/2026/09/atta cker-hijacks-ai-coding-assistant.html # AI # Malware # CyberSec
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories https:// thehackernews.com/2026/09/atta cker-hijacks-ai-coding-assistant.html