Hijacked AI coding assistant session spreads Shai-Hulud inside a SaaS provider
Mandiant described an intrusion at an unnamed SaaS provider in which a developer accepted poisoned software recommended through an AI coding assistant session the attacker had hijacked. The attacker installed an infostealer through a poisoned PyPI package, stole GitHub OAuth tokens, deployed the Shai-Hulud worm across about 100 internal repositories, and poisoned a package in the company's own namespace, which infected a second employee.
- Victim
- Unnamed SaaS provider (Mandiant case study)
- Industry
- B2B SaaS
- Country
- Not disclosed
- Intrusion began
- Not disclosed
- First disclosed
- Sep 16, 2026
- Actor
- Unattributed
- Initial access
- Supply chain
- Identity control that failed
- Session and tokens
- MFA
- Not applicable (no interactive login)
- Abused identity
- Non-human (service account, token, key or app)
- Records affected
- Not disclosed
- Disclosed cost
- Not disclosed
The identity lesson
Developer OAuth tokens on a workstation gave the worm write access to the company's code. Short-lived, device-bound developer tokens and review of AI-suggested dependencies before install limit the spread.
Go deeper on SWI
- Technique: Infostealer credential harvesting
- SWI coverage: hijacked ai coding assistant session spread shai hulud to 100 repos
Sources
- Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories, The Hacker News, Sep 16, 2026
Record verified Oct 31, 2026 against the sources above. Corrections: contact us.
Related incidents
- Shai-Hulud 2.0 npm worm exposes credentials in 25,000+ repositories 2025 · Supply chain
- Shai-Hulud self-replicating npm worm steals maintainer tokens 2025 · Supply chain
- Nx s1ngularity npm compromise harvests developer secrets with AI CLIs 2025 · Supply chain
- tj-actions/changed-files GitHub Action compromise leaks CI secrets 2025 · Supply chain
Cite this record
SWI Community Team. (2026). Hijacked AI coding assistant session spreads Shai-Hulud inside a SaaS provider. Identity Breach Database, Start with Identity. https://startwithidentity.com/breaches/incidents/2026-saas-provider-ai-coding-assistant-shai-hulud/
Part of the Identity Breach Database, free to reuse under CC BY 4.0. Analysis across every record: Identity Breach Report 2026.