Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

Mandiant reports that an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider. The assistant recommended a poisoned software package, and the recommendation was accepted, after which the attacker used the developer's session to install an infostealer through a poisoned PyPI package and steal GitHub OAuth tokens. The attacker then deployed the self-spreading Shai-Hulud worm across about 100 internal repositories, stealing repository secrets and source code. A poisoned package in the company's official namespace also caused a second infection when another employee pulled it.