Hackerbot-Claw: Adversarial Agent Targets Top GitHub Repos

Pillar Security analyzed the “Chaos Agent” (hackerbot-claw) campaign in which an AI-driven agent, guided by a human operator, located CI/CD misconfigurations across major open-source projects, executed multiple exploitation techniques (including composite-action and shell-injection vectors), compromised Aqua Security's Trivy CI to obtain org-scoped tokens, and published a malicious VSCode extension designed to spawn AI coding agents to exfiltrate SSH keys, cloud credentials, and API tokens; the campaign was fast (operations within hours), partially autonomous, has been remediated, but the techniques and instructions remain public.