Shai-Hulud Worm Attack: AI Coding Assistant Session Hijack Exposes SaaS Code Repositories to Supply Chain Compromise
· Source: rescana.com
In short
An attacker hijacked the session credentials of an AI coding assistant at a SaaS provider, using its broad repository permissions to deploy the self-propagating Shai-Hulud worm across roughly 100 internal code repositories. The worm used a poisoned PyPI package to harvest secrets, API keys and OAuth tokens, and achieved persistence by injecting hooks into AI assistant and editor configuration files such as .claude/settings.json and .vscode/tasks.json. The incident, publicly disclosed on September 16, 2026, exploited non-human identity governance failures and highlights AI-driven development tools as a growing software supply chain attack surface.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 38, 2026: AI Moves Closer to Supply Chain Decisions, but Data and Returns Still Lag
Tags: supply chain, cybersecurity, code repositories, malware, credentials, AI agents