Mandiant: attacker hijacks AI coding session, spreads Shai-Hulud to ~100 repos
Mandiant says an attacker hijacked an active AI coding assistant session at an unnamed SaaS firm, got a poisoned PyPI package accepted via the assistant’s recommendation, then spread the Shai Hulud w…
