🚨 Security Alert: Main branch compromised with Shai-Hulud credential stealer via force-push · Issue #1182 · Pythagora-io/gpt-pilot (opens in new tab)

Covers Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python LinterCovered by stepsecurity.ioDiscussed on Hacker News

On June 8, 2026 at 11:01 UTC, the LeonOstrez GitHub account (a Pythagora co-founder) was compromised and used to force-push a credential-stealing payload to the main branch. The repository had no b...

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 1 article

stepsecurity.io·

Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python Linter

Discussed on Hacker News