Tag

#ai-coding-assistant

1 story tagged ai-coding-assistant.

Bar chart comparing three AI-targeted supply chain worm campaigns from August and September 2026, showing Shai-Hulud at 100 repositories, Keyv npm worm at 444 packages, and a Shai-Hulud credential variant scanning 469 locations for credentials.

AI coding assistant hijack spreads worm to 100 repos

An AI coding assistant hijack at a SaaS provider let attackers spread the Shai-Hulud worm across 100 repositories, stealing secrets and proprietary source code.

Lars Cornelissen · Sep 17, 2026