{"id":244129,"date":"2026-09-17T05:22:45","date_gmt":"2026-09-17T10:22:45","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/09\/attacker-hijacks-ai-coding-assistant-session-spreads-shai-hulud-across-about-100-repositories"},"modified":"2026-09-17T05:22:45","modified_gmt":"2026-09-17T10:22:45","slug":"attacker-hijacks-ai-coding-assistant-session-spreads-shai-hulud-across-about-100-repositories","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/09\/attacker-hijacks-ai-coding-assistant-session-spreads-shai-hulud-across-about-100-repositories","title":{"rendered":"Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/attacker-hijacks-ai-coding-assistant-session-spreads-shai-hulud-across-about-100-repositories.jpg\"><\/a><\/p>\n<p>Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread <a href=\"https:\/\/thehackernews.com\/2025\/09\/40-npm-packages-compromised-in-supply.html\" target=\"_blank\">Shai-Hulud<\/a> across about 100 internal code repositories.<\/p>\n<p>Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for the company\u2019s products.<\/p>\n<p>The case appears in <a href=\"https:\/\/cloud.google.com\/security\/resources\/ai-risk-and-resilience-2026\" target=\"_blank\">Mandiant\u2019s September 2026 report<\/a>. The public case study does not say when the intrusion happened or how the attacker took over the active coding-assistant session.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for the company\u2019s products. [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-244129","post","type-post","status-publish","format-standard","hentry","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=244129"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244129\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=244129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=244129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=244129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}