Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
- Posted on September 16, 2026
- By The Hacker News
- 1 Views
- 1 min read
In brief
A sophisticated security breach has exposed critical vulnerabilities in AI development environments. According to Mandiant's investigation, threat actors successfully compromised an active coding assistant session, obtaining GitHub OAuth tokens and utilizing them to deploy the Shai-Hulud malware across approximately 100 repositories. This incident highlights the emerging risks associated with AI-powered development tools and the importance of implementing robust authentication mechanisms and continuous session monitoring to prevent unauthorized access to sensitive development infrastructure.
Summary auto-generated by AI from the original publisher's content. Editorial standards.
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Mandiant says an attacker hijacked an active AI coding session, stole GitHub OAuth tokens, and spread Shai-Hulud across about 100 repositories.
