An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
Tom's Hardware on MSN
AI coding agents can be tricked into installing malware via 'clean' GitHub repositories
Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.
A widespread AI-assisted campaign promoting an OpenClaw Docker deployer package is spreading more than 300 Trojanized GitHub packages targeting developers and gamers alike with a data-stealing Trojan.
Fake OpenClaw installers hosted in GitHub repositories and promoted by Microsoft Bing’s AI-enhanced search feature instructed users to run commands that deployed information stealers and proxy malware ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results