Live data from Hacker News

Pythagora-Io/GPT-Pilot Compromised Credential Stealer Blocked by Python Linter

github.com

1–2 of 2 posts

Re: Pythagora-Io/GPT-Pilot Compromised Credential Stealer Blocked by Python Linter

#2
An attacker hijacked a co-founder's GitHub account for gpt-pilot, a 33K-star AI coding tool, and force-pushed a credential-stealing Shai-Hulud payload to the main branch. The ruff Python linter caught formatting and lint violations in the malicious code and blocked the CI build -- twice. The attacker gave up.