A stolen GitHub token rewrote LiteLLM's release workflow, and version 1.107.0 ran a credential stealer the moment Python started.
CARBONATO hijacks exposed Docker daemons, then runs an AI agent to loot credentials and fund its own model access.
Code running inside a sandboxed AI agent's virtual machine could read and rewrite files anywhere on the Mac that launched…
The attack leverages both malicious Docker images on Docker Hub and fake VS Code extensions, requiring developers to verify all…