Loading video...
Video Failed to Load
💥 Your AI coding assistant might be stealing your SSH keys. 💥 Socket found an active Shai-Hulud style npm worm (SANDWORM_MODE) that hijacks CI workflows, spreads via stolen tokens, and injects rogue MCP servers to poison AI coding tools and steal secrets.
15,147 views • 4 months ago •via X (Twitter)
0 Comments
No comments available
Comments from the original post will appear here


