hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far

An autonomous AI-powered bot called hackerbot-claw conducted a week-long automated attack campaign targeting CI/CD pipelines across major open source repositories including Microsoft, DataDog, and CNCF projects. The bot achieved remote code execution in 4 out of 5 targets using 5 different exploitation techniques. Successfully exfiltrated a GitHub token with write permissions from one of the most popular repositories on GitHub. The campaign demonstrates sophisticated automated attacks against GitHub Actions workflows in major open source projects.