GitHub issues used in CI attacks on 61 public repositories
Radware counted 83 payloads, mostly within 43 minutes on September 1, aimed at stealing CI secrets; code changes remain unconfirmed.
68
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenOct 28, 2026
- Last mentioned1d ago
Timeline
2 articles · newest firstAttackers abuse enterprise AI tools for theft, C2, and agent hijacking
A fake Postmark MCP package siphoned mail after 15 clean versions, and SesameOp hid C2 in the OpenAI Assistants API.
52
Related CVEs
by mentions- CVE-2026-2525332%8.8One-Click WebSocket Token Leak Enabling RCE in OpenClaw (Moltbot/Clawdbot)
- CVE-2025-327117%7.5Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network
Appears with
- Jozuorganization · 1
- Grokai model · 1
- Braveproduct · 1
- Claudeai model · 1
- ChainDropmalware · 1
- LangExtractproduct · 1
- GitHubproduct · 1
- Trivyproduct · 1
- Shai-Huludmalware · 1
- Microsoft 365 Copilotproduct · 1
- SesameOpmalware · 1
- MLflowproduct · 1
- Check Pointorganization · 1
- OpenClawproduct · 1
- ActiveCampaignvendor · 1
- Microsoftvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.