Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
More on Repositories
Other advisories
- Not ratedosv:CVE-2026-109844Gitea watched repositories API disclosure after access revocation
- Not ratedosv:CVE-2026-105661Gitea panic on the repositories route of individual users
- MediumCVE-2026-107445In Katello wurde eine Schwachstelle entdeckt, bei der die Flatpak Remote Repositories API die Autorisierung nicht ordnungsgemäß durchsetzt, ...
- MediumCVE-2026-107444In Katello wurde eine Schwachstelle gefunden, bei der die Docker Tags Repositories API die Organisationsskoping nicht ordnungsgemäß durchset...
- HighCVE-2026-57449Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token
- HighCVE-2026-57449Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token
- Not ratedosv:CVE-2026-94114Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning
- HighCVE-2026-96399Ein regulärer Ausdruck im externen Issue-Tracker eines Repositories mit abwechselnden Erfassungsgruppen könnte bei der Darstellung von Issue...
Other news entries
- 'Gheist' Weaponizes GitHub Tokens to Steal Cloud SecretsNewsDark Reading
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsNewsThe Hacker News
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub RepositoriesNewsThe Hacker News
- GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 RepositoriesNewsThe Hacker News
- Docker Hub flaw let attackers impersonate users, tamper with imagesNewsBleepingComputer
- Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of RepositoriesNewsThe Hacker News
- FakeGit malware campaign returns with 17,610 malicious GitHub reposNewsBleepingComputer
- Over 543,000 valid credentials exposed in public GitHub repositoriesNewsBleepingComputer
Source: https://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.html
ID