Stolen AI coding assistant credentials can be a goldmine for attackers, allowing them to resell or rack up usage charges on the victim's account, and even gain a foothold into the developer's broader environment. The Aoki infostealer has evolved to target these valuable credentials, expanding its reach beyond browser data and cryptocurrency wallets.
source & further reading
osintsights.com — original article
Fake AI Attacks Target US Companies via Impersonated Brands
Vulnerabilities in LiteLLM Gateway Expose AI Systems to Takeover
Decision Models Vulnerable to Indirect Prompt Injection Attacks