/
initial_access_vector:prompt_injection × latest_source_host:safedep.io × limpar

Resultados

2 casos · pág. 1/1

safedep.io · low

SafeDep tests Jev and Gryph to flag malicious actions by compromised AI coding agents such as Claude Code

A SafeDep researcher describes an experiment that uses Gryph (an audit trail for AI coding agents) and TypeSafe AI's Jev model to separate a developer's normal agent activity from attacks. The article cites threats to agents such as Claude Code and Codex: the Mini Shai-Hulud worm commits Claude Code hooks into repositories, malicious npm …

technology software development
safedep.io · high

Hijacked AI coding assistant session recommends malicious PyPI package, seeding Shai-Hulud worm across ~100 internal repositories

In September 2026, researchers reported an attack that began inside a live AI coding assistant session at a software company. The attacker gained control of a developer's session, and the assistant recommended a PyPI package that looked normal. The developer installed it, and a hidden infostealer took source code, repository secrets and h…

TeamPCP technology software development