SOURCE-LINKED INTELLIGENCE

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

The Hacker News · article · Sep 16, 2026 · UTC

Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for the

Read original source ↗ Open in workspace

recordType: article
region: Global

Evidence & attribution

The Hacker News · 2026-09-16T13:37:07.000Z

First collected: 2026-09-19T20:26:32.566Z. This is not the publication date.