Hackerbot-Claw GitHub Actions Exploitation Campaign
An autonomous AI agent called hackerbot-claw is exploiting misconfigured GitHub Actions workflows to steal tokens and hijack repositories, fully compromising Aqua Security's Trivy project and publishing a malicious VS Code extension in its place.
