Skip to content

security_identifier

Shai-Hulud 2

A software supply-chain breach whose exposed developer credentials are counted in 2025 secrets-sprawl tallies.

Current clusters

build1 publisher

The credential an agent inherits sets the ceiling on the damage

GitGuardian argues that credentials and permissions decide how bad an agent incident gets. Checked against the three 2026 disclosures it cites, the argument holds up, and only one of the three involved steering a model.

Publishers:dev.to

Reality

Evidence60
Adoption45
Hype gap+15
Incentives82
Confidence55