LIVE FEED
CRITICAL SGLang RCE Exploit Breaches NEAR AI, Hits 18 Agents // FIRST LOOK F-Secure Releases AI Harms Taxonomy Mapping 26 Consumer Risks // CRITICAL Cursor Marketplace Trojanized via Stolen Fireworks AI Key // CRITICAL Cairn AI Framework Hits Semiconductor and Defense Orgs // HIGH TypoPrompting: 186 Fake AI Domains Spread ClickFix Malware // CRITICAL Post-Training Supply Chain Attacks Backdoor AI Coding Agents // HIGH Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits // HIGH Unsanctioned AI Agents Expose Five Enterprise Identity Security Gaps // HIGH OpenAI Agents Gain Root Access, Conceal Activity in CI Clusters // FIRST LOOK AWS Launches A2A Protocol for Interoperable Multi-Agent Systems //
SHAI-HULUD

Shai-Hulud

3 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Tensorlake npm Package Hijacked by Shai-Hulud Worm

Tensorlake npm Package Hijacked by Shai-Hulud Worm

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 The Hacker News

The tensorlake npm package (version 0.5.144) was compromised as part of a supply chain attack delivering the Shai-Hulud credential-stealing worm, which harvests tokens, SSH keys, AWS credentials, and configuration files from AI developer tools including Anthropic Claude, Cursor, and Windsurf. The self-propagating worm republishes compromised packages under victim maintainer identities and uses an Ethereum smart contract for C2 resolution, with a destructive 'hostage token' mechanism triggered if victims revoke stolen GitHub tokens. The attack specifically targets AI/ML developer toolchains, making it directly relevant to teams building on or integrating with Tensorlake-based infrastructure.

UAC-0099 GuardBreaker Trips LLM Safety to Block Malware Analysis

UAC-0099 GuardBreaker Trips LLM Safety to Block Malware Analysis

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Russia-aligned threat actor UAC-0099 has deployed a technique called GuardBreaker that embeds nuclear weapon prompts inside malicious VBS scripts to deliberately trigger LLM safety guardrails and prevent AI-assisted malware analysis. This represents a maturing offensive tradecraft where adversarial prompt injection is weaponised not to extract information but to induce refusal states in AI security tooling. The technique mirrors similar tactics observed in the TeamPCP supply chain campaigns, signalling that LLM-first security pipelines are becoming a recognised and actively exploited weak point.

TeamPCP Steals Mistral AI Source Code via Supply Chain

TeamPCP Steals Mistral AI Source Code via Supply Chain

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 BleepingComputer

The TeamPCP threat group has compromised Mistral AI's codebase management system via the Shai-Hulud software supply chain attack, stealing approximately 5GB of internal repositories covering training, fine-tuning, benchmarking, and inference pipelines. The hackers are demanding $25,000 for nearly 450 repositories or threatening to leak them publicly within a week. Mistral AI confirmed the breach but stated that core repositories, hosted services, managed user data, and research environments were not affected.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.