Executive Summary
GitGuardian found a Shai-Hulud infostealer worm variant now scans 469 credential locations across developer environments, CI/CD, cloud configs and AI tool configs, up from 189.
What Happened
In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across 469 locations across developer environments, Continuous Integration/Continuous Deployment (CI/CD) tooling, cloud configurations, and even AI tool configs. Earlier variants of the infostealer worm only checked 189 paths. The jump says a lot. Attackers have
Vulnerability / Attack Technique
Infostealer worm harvesting credentials including AI tool configs
Technical Mechanism
The worm checks a growing list of file paths for secrets, now including configuration files of AI tools.
AI Security Category
LLM02:2025 Sensitive Information Disclosure
Relevant Frameworks
RealGround Analysis
AI tool configuration files are now on attackers' list of places to look for keys. RealGround analysis: keep AI API keys out of plaintext config files on developer machines.
Recommended Controls
- Store AI API keys in a secrets manager, not config files
- Scan developer machines and CI for plaintext credentials
- Rotate keys found in AI tool configs
Related RealGround Service
AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/09/shai-huluds-reach-just-grew-to-469.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-17.