{
 "type": "bundle",
 "id": "bundle--7d803085-71d0-5cbd-9d18-40dd71085c65",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--e3dca659-93d8-56bd-a3f4-9661832066d5",
   "created": "2025-08-26T00:00:00.000Z",
   "modified": "2025-08-26T00:00:00.000Z",
   "name": "s1ngularity: npm-borne malware drives developers' own AI CLIs (Claude, Gemini, Q) to hunt for secrets",
   "description": "Malicious versions of the Nx build package shipped a postinstall script that, on developer machines and in CI, invoked locally installed AI command-line agents — Claude, Gemini and Amazon Q — with permission-skipping flags (--dangerously-skip-permissions, --yolo, --trust-all-tools) and prompted them to enumerate the filesystem for wallets, keystores, .env files and SSH keys. Wiz observed the AI-assisted reconnaissance succeed in hundreds of cases (provider guardrails sometimes intervened). Harvested tokens were base64-encoded into attacker-created public GitHub repos; a second wave used leaked tokens to flip victims' private repositories public. This is a trace of AI agents turned into the attacker's reconnaissance tool.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-008",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-008/"
    },
    {
     "source_name": "Wiz",
     "url": "https://www.wiz.io/blog/s1ngularity-supply-chain-attack",
     "description": "s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to know"
    },
    {
     "source_name": "Okta Threat Intelligence",
     "url": "https://www.okta.com/blog/threat-intelligence/the-s1ngularity-attack--when-attackers-prompt-your-ai-agents-to/",
     "description": "The s1ngularity attack: When attackers prompt your AI agents to do their bidding"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--c81a23d1-3876-5be5-b04a-6b91e046f3e5",
   "created": "2025-08-26T00:00:00.000Z",
   "modified": "2025-08-26T00:00:00.000Z",
   "name": "Unknown operator; malware that weaponised the victims' installed AI CLIs",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--24faf331-049e-533d-b422-637924d68375",
   "created": "2025-08-26T00:00:00.000Z",
   "modified": "2025-08-26T00:00:00.000Z",
   "name": "GitHub and npm — disabled the exfil repos and removed the packages; vendors' agent guardrails caught some runs",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--44ee8b11-8c02-5b5d-a406-5b19ccca6bb5",
   "created": "2025-08-26T00:00:00.000Z",
   "modified": "2025-08-26T00:00:00.000Z",
   "name": "TA0043 Reconnaissance",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0043"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--7fec6a69-bf80-52cd-9f04-8a513ff8f255",
   "created": "2025-08-26T00:00:00.000Z",
   "modified": "2025-08-26T00:00:00.000Z",
   "name": "TA0006 Credential Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0006"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--5e0a317d-92da-5525-864a-799dcaaa2d05",
   "created": "2025-08-26T00:00:00.000Z",
   "modified": "2025-08-26T00:00:00.000Z",
   "name": "TA0009 Collection",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0009"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--50a6a7d9-20f2-5f4d-b0ce-e7c1e01a4ff5",
   "created": "2025-08-26T00:00:00.000Z",
   "modified": "2025-08-26T00:00:00.000Z",
   "name": "TA0010 Exfiltration",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0010"
    }
   ]
  }
 ]
}