OIDC

A sophisticated AI-driven attack framework has been identified conducting autonomous operations against Asian government infrastructure. The system leverages multi-agent orchestration to perform reconnaissance, credential cracking, and data exfiltration with minimal human intervention.

Threat actors have successfully compromised dozens of Microsoft-owned repositories to deploy the Miasma malware via supply-chain attacks. The malware is designed to steal cloud credentials and spread laterally through developer environments by exploiting AI coding agents.

An attacker successfully compromised 42 TanStack npm packages by chaining GitHub Actions cache poisoning with OIDC token extraction. The breach allowed for the unauthorized publication of malicious versions that could exfiltrate sensitive cloud and infrastructure credentials.