Pythagora-Io/GPT-Pilot Compromised Credential Stealer Blocked by Python Linter
1–2 of 2 posts
Re: Pythagora-Io/GPT-Pilot Compromised Credential Stealer Blocked by Python Linter
#2An attacker hijacked a co-founder's GitHub account for gpt-pilot, a 33K-star AI coding tool, and force-pushed a credential-stealing Shai-Hulud payload to the main branch. The ruff Python linter caught formatting and lint violations in the malicious code and blocked the CI build -- twice. The attacker gave up.