Credentials that reach beyond the laptop: Miasma harvested credentials from developers who only opened a repository, and those keys and tokens open servers, repositories and cloud accounts.
Disruption at scale: GitHub’s response to Miasma disabled 73 repositories across four Microsoft organisations in 105 seconds, taking Azure/functions-action offline for everyone who used it (StepSecurity).
High success rates: Agentjacking reported an 85% success rate, with at least 2,388 organisations exposing endpoints that accepted injected events (The Hacker News).
Lost or poisoned code: an auto-approved rm -rf, force-push or DROP TABLE destroys work in seconds, and a session that can push reaches your CI, reviewers and users.
Persistence: edits to .claude/, CI workflows or shell startup files keep running for everyone who uses the repository.
Blind spots in tracking: only two of the ten attacks have a CVE, so a risk register fed by CVE feeds misses most of them.