Back Feeds.4Sysops

Agentjacking attacks exploit AI coding agents via malicious error reports

Feeds.4Sysops •IT News • June 12, 2026

Researchers have identified a new attack class called agentjacking that tricks AI coding assistants into executing malicious code on developer workstations. The technique exploits an architectural flaw in how AI agents ingest data from Sentry, a popular platform used for tracking application errors and performance. By injecting crafted markdown into Sentry error events, attackers can deceive agents like Claude Code and Cursor into treating malicious instructions as legitimate diagnostic steps. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New GitHub Exploit Allows AI Coding Agents to Execute Malicious Payloads Researchers from Mozilla's 0DIN have demonstrated a new attack vector that allows AI coding agents, specifically Anthropic's Claude Code, to execute malicious payloads from seemingly benign GitHub repositories. The attack exploits the agent's automated error recovery process, where it runs initialization commands without human oversight. This method involves three steps: a Python package requiring initialization, a command that runs a script, and a DNS TXT record controlled by the attacker that retrieves and executes a payload. Notably, no malicious code exists in the cloned repository, making detection by security scanners and human reviewers nearly impossible. The attack grants the attacker a shell with the developer's privileges, allowing access to sensitive data such as environment variables and API keys. Although currently a proof-of-concept, the method poses a significant risk to developers using automated coding tools. The researchers recommend treating automated initialization steps as untrusted execution and implementing explicit human approval gates. No active exploitation has been reported yet. 67 sources 62

Extracted Entities

Agentjacking attacks exploit AI coding agents via malicious error reports

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

Tools (2)