Six days before Chainguard launched Workspaces, a credential-stealing worm called Shai-Hulud was burrowing through the Tensorlake npm SDK. It ran via a preinstall hook — before any application code, before any agent, before any system prompt telling it to behave. It grabbed GitHub tokens, AWS credentials, Kubernetes secrets, and Claude configuration files sitting in developers’ home directories. The worm didn’t attack the AI agent. It attacked the host the agent was running on. On October 14, Chainguard shipped its answer: Workspaces, hardened microVMs that put your AI coding agent somewhere it can’t reach your real credentials in the first place. […]
The post
source & further reading
byteiota.com — original article
OpenCode Breach: Rotate Your AI Provider Keys Today
OpenAI Rogue Agents: 19 Incidents, Including Gov Hack
Apple RSI-Inference Bench: AI Agents Speed Serving 1.68x