Automated AI Attack Targets Major GitHub Repositories

Automated AI Attack Targets Major GitHub Repositories

First seen 2 Mar 2026, 13:10 UTC StepsecurityCybernewsUpwindGbhackersCybersecuritynews+3 81% similarity 46.7

Article Content

Browse articles
ThreatCluster

An AI-powered bot, known as hackerbot-claw, executed a week-long attack on CI/CD pipelines of major open-source GitHub repositories, leading to remote code execution vulnerabilities. The attack compromised at least five repositories, including Project-akri, through direct script injection methods. The incident highlights the growing sophistication of automated cyber threats in software development environments.

ThreatCluster AI

Timeline

2026-02-24
Automated attack campaign began targeting GitHub repositories
2026-03-01
Stepsecurity article published detailing the attack
2026-03-02
Cybernews article published confirming repository compromises

Community

Browse all →