--- title: Shai-Hulud shows engineering teams have a new AI... description: The Shai-Hulud campaign targeted AI coding agent configuration files (such as Claude Code's) to spread malicious instructions across developer environments,... canonical: https://daily.dev/posts/shai-hulud-shows-engineering-teams-have-a-new-ai-security-problem-4stdyptwl twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Shai-Hulud shows engineering teams have a new AI security problem | daily.dev og:description: The Shai-Hulud campaign targeted AI coding agent configuration files (such as Claude Code's) to spread malicious instructions across developer environments,... og:url: https://daily.dev/posts/shai-hulud-shows-engineering-teams-have-a-new-ai-security-problem-4stdyptwl og:image: https://api.daily.dev/og/posts/4STdYPTwl.png og:image:alt: Shai-Hulud shows engineering teams have a new AI security problem og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Shai-Hulud shows engineering teams have a new AI security problem **[LeadDev](https://daily.dev/sources/leaddev)** · 6 min read · 0 upvotes · 0 comments ## Summary The Shai-Hulud campaign targeted AI coding agent configuration files (such as Claude Code's) to spread malicious instructions across developer environments, exposing a critical governance gap. LeadDev's forthcoming AI Impact Report 2026 data reveals that 81% of teams grant AI agents write access to code repositories, only 7% operate agents read-only, and nearly a quarter reuse human developer credentials for agents. Just 7% use a dedicated platform for non-human identity management, while 15% rotate agent credentials, 14% monitor for anomalous behavior, and only 10% auto-revoke access. The piece argues that security awareness is rising but security maturity — credential rotation, behavioral monitoring, formal IAM for agents — remains rare, making AI coding agents an increasingly attractive attack surface. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What percentage of engineering teams give AI coding agents write access to code repositories? 81% of engineering teams give AI coding agents write access to code repositories, while only 7% restrict agents to read-only access. Additionally, 60% allow agents to modify cloud-based productivity and collaboration platforms, a third grant write access to email, and more than a quarter allow agents to interact directly with cloud infrastructure. _Teams governing AI agent permissions track emerging attack patterns like Shai-Hulud on daily.dev._ ### How did the Shai-Hulud malware campaign attack AI coding tools? Shai-Hulud was a self-propagating worm that compromised configuration files used by AI coding tools such as Claude Code to spread malicious instructions between developer environments. Rather than attacking source code repositories directly, it targeted the workflow systems developers rely on to produce code, exploiting the broad write permissions already granted to AI agents. _Developers securing AI coding workflows stay ahead of campaigns like this through daily.dev._ ### What percentage of organizations have formal identity and access management for AI coding agents? Only 7% of organizations use a dedicated platform to manage non-human identities, and 6% have built internal systems. A quarter have not addressed agent IAM at all. Just 15% rotate or expire agent credentials on a schedule, 14% monitor for anomalous agent behavior, 10% auto-revoke access when no longer needed, and 9% have a formal provisioning process. _Engineering leaders benchmarking their AI agent governance against peers follow the conversation on daily.dev._ ## Similar posts on daily.dev - [Shadow AI Is Already Inside Your Organization](https://daily.dev/posts/shadow-ai-is-already-inside-your-organization-e0fveze6k) · Security Boulevard · 0 upvotes · 0 comments - [AI Coding Agent Horror Stories: Security Risks Explained](https://daily.dev/posts/ai-coding-agent-horror-stories-security-risks-explained-vv12xoikj) · Docker · 0 upvotes · 0 comments - [Agentic AI Security Comes Down to Access, Not the Trick](https://daily.dev/posts/agentic-ai-security-comes-down-to-access-not-the-trick-q9sdq1e4s) · GitGuardian · 0 upvotes · 0 comments - [Security briefing: August 2026](https://daily.dev/posts/security-briefing-august-2026-kxp9cfxfi) · Sysdig Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cloud](https://daily.dev/tags/cloud), [#ai-agents](https://daily.dev/tags/ai-agents), [#ai-security](https://daily.dev/tags/ai-security) [View this post on daily.dev](https://daily.dev/posts/shai-hulud-shows-engineering-teams-have-a-new-ai-security-problem-4stdyptwl) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Shai-Hulud shows engineering teams have a new AI security problem","url":"https://daily.dev/posts/shai-hulud-shows-engineering-teams-have-a-new-ai-security-problem-4stdyptwl","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/shai-hulud-shows-engineering-teams-have-a-new-ai-security-problem-4stdyptwl"},"datePublished":"2026-08-07T10:11:57.500Z","dateModified":"2026-08-07T10:13:34.712Z","description":"The Shai-Hulud campaign targeted AI coding agent configuration files (such as Claude Code's) to spread malicious instructions across developer environments,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6e74e00743da466d9f2a273a359126d7?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6e74e00743da466d9f2a273a359126d7?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"LeadDev","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"LeadDev","logo":"https://media.daily.dev/image/upload/s--u_Q34nzh--/f_auto,q_auto/v1774514111/logos/leaddev?_a=BAMAMiWQ0","url":"https://daily.dev/sources/leaddev"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/shai-hulud-shows-engineering-teams-have-a-new-ai-security-problem-4stdyptwl","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cloud,ai-agents,ai-security","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"LeadDev","item":"https://daily.dev/sources/leaddev"},{"@type":"ListItem","position":3,"name":"Shai-Hulud shows engineering teams have a new AI security problem"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/shai-hulud-shows-engineering-teams-have-a-new-ai-security-problem-4stdyptwl#faq","mainEntity":[{"@type":"Question","name":"What percentage of engineering teams give AI coding agents write access to code repositories?","acceptedAnswer":{"@type":"Answer","text":"81% of engineering teams give AI coding agents write access to code repositories, while only 7% restrict agents to read-only access. Additionally, 60% allow agents to modify cloud-based productivity and collaboration platforms, a third grant write access to email, and more than a quarter allow agents to interact directly with cloud infrastructure. Teams governing AI agent permissions track emerging attack patterns like Shai-Hulud on daily.dev."}},{"@type":"Question","name":"How did the Shai-Hulud malware campaign attack AI coding tools?","acceptedAnswer":{"@type":"Answer","text":"Shai-Hulud was a self-propagating worm that compromised configuration files used by AI coding tools such as Claude Code to spread malicious instructions between developer environments. Rather than attacking source code repositories directly, it targeted the workflow systems developers rely on to produce code, exploiting the broad write permissions already granted to AI agents. Developers securing AI coding workflows stay ahead of campaigns like this through daily.dev."}},{"@type":"Question","name":"What percentage of organizations have formal identity and access management for AI coding agents?","acceptedAnswer":{"@type":"Answer","text":"Only 7% of organizations use a dedicated platform to manage non-human identities, and 6% have built internal systems. A quarter have not addressed agent IAM at all. Just 15% rotate or expire agent credentials on a schedule, 14% monitor for anomalous agent behavior, 10% auto-revoke access when no longer needed, and 9% have a formal provisioning process. Engineering leaders benchmarking their AI agent governance against peers follow the conversation on daily.dev."}}]} ```