Security News Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories TheHackerNews Daniel Bender 16 Sep 2026 Share Mandiant says an attacker hijacked an active AI coding session, stole GitHub OAuth tokens, and spread Shai-Hulud across about 100 repositories.