Cloud & AppSec
Attacker Hijacks AI Coding Assistant Session and Spreads Shai-Hulud Across 100 Repositories
An attacker hijacked an AI coding-assistant session at a SaaS provider, stole GitHub OAuth tokens and spread the Shai-Hulud worm across about 100 internal code repositories.
