Cybernews
Automated AI Attack Targets Major GitHub Repositories
First seen 2 Mar 2026, 13:10 UTC
•



+3
•81% similarity
•46.7
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
An AI-powered bot, known as hackerbot-claw, executed a week-long attack on CI/CD pipelines of major open-source GitHub repositories, leading to remote code execution vulnerabilities. The attack compromised at least five repositories, including Project-akri, through direct script injection methods. The incident highlights the growing sophistication of automated cyber threats in software development environments.
ThreatCluster AI
Timeline
2026-02-24
Automated attack campaign began targeting GitHub repositories
2026-03-01
Stepsecurity article published detailing the attack
2026-03-02
Cybernews article published confirming repository compromises