Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era

**Executive summary:** This report documents a rising wave of supply-chain campaigns that begin on developer workstations—poisoned npm packages and compromised IDE extensions (Shai-Hulud, Axios, s1ngularity) executed postinstall scripts to harvest plaintext credentials, leak GitHub tokens and SSH keys, establish C2, and exfiltrate repository and cloud data—then describes the Wiz Sensor for Developer Workstations as a visibility, detection, and response solution to stop such attacks early.