Mandiant reported that an attacker hijacked an active AI coding-assistant session at an unnamed SaaS provider; the assistant then recommended poisoned software that was accepted, allowing the Shai-Hulud worm to spread across roughly 100 internal code repositories and steal secrets and source code.
Disclosed 16 September 2026 · Record updated 1 October 2026
Worm stole repository secrets and source code across about 100 internal code repositories at an unnamed SaaS provider.
IncidentsMandiant says an attacker took over a live coding-assistant session at a SaaS provider, then used poisoned software recommendations to reach about 100 internal repositories.
16 Sept 2026
