Hijacked AI coding assistant session recommends malicious PyPI package, seeding Shai-Hulud worm across ~100 internal repositories
In September 2026, researchers reported an attack that began inside a live AI coding assistant session at a software company. The attacker gained control of a developer's session, and the assistant recommended a PyPI package that looked normal. The developer installed it, and a hidden infostealer took source code, repository secrets and h…