A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims’ Blind Spots

CrowdStrike says it found an active worm targeting AI development toolchains.

The malware scouts systems, steals tokens and keys such as npm credentials, then expands its access.

It imitates normal automation and may trigger later to delete files or block legitimate access.

The case shows AI development pipelines are becoming a new software supply chain attack surface.