Worm targeting AI coding systems steals credentials and has 'death switch'

CrowdStrike discovered a worm targeting AI development workflows that steals npm tokens and server credentials, and can deploy a 'death switch' to destroy files. The attack highlights how adversaries are exploiting the AI toolchain for persistence and data theft.

Featured · Adam Meyers