Hijacked AI coding assistant session spread malware to about 100 repositories

An attacker hijacked an active AI coding-assistant session at an unnamed SaaS provider and spread Shai-Hulud malware across approximately 100 internal code repositories. The attacker poisoned software that the AI assistant recommended, and the recommendation was accepted, enabling the worm to steal repository secrets and source code.

Sources

• Primary source on file. It names the organization, so it is not linked while this entry is anonymized.
• Upstream: Security news (RSS + Claude). The upstream record names the organization, so it is not linked here.
• Candidate incidents extracted from public security reporting; every entry links its article