corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a07df2-c5bd-7397-9d99-8d8f0305e6f4

When an AI agent came knocking: Catching malicious contributions in Datadog’s open source repos

Datadog Engineering · published 9 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at datadoghq.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
50
Words captured
4,598

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
Detecting malicious pull requests at scale with LLMs Read at the source ↗
datadoghq.com
https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation
stepsecurity.io
https://securitylab.github.com/resources/github-actions-untrusted-input/
securitylab.github.com
https://owasp.org/www-project-top-10-ci-cd-security-risks/CICD-SEC-04-Poisoned-Pipeline-Execution
owasp.org
https://wellarchitected.github.com/library/application-security/recommendations/actions-security/
wellarchitected.github.com
https://www.aikido.dev/blog/promptpwnd-github-actions-ai-agents
aikido.dev
Clinejection — Compromising Cline's Production Releases just by Prompting an Issue Triager Read at the source ↗
adnanthekhan.com
https://github.com/anthropics/claude-code-action
github.com
https://github.com/openai/codex-action
github.com
https://github.com/google-github-actions/run-gemini-cli
github.com
https://github.com/nickboucher/trojan-source
github.com
What the fork? Imposter commits in GitHub Actions and CI/CD Read at the source ↗
chainguard.dev
https://opensource.datadoghq.com/
opensource.datadoghq.com
https://github.com/vectordotdev/vector/
github.com
https://github.com/DataDog/chaos-controller
github.com
https://github.com/DataDog/stratus-red-team
github.com
https://github.com/DataDog/integrations-core
github.com
https://docs.datadoghq.com/security/cloud_siem/
docs.datadoghq.com
https://docs.datadoghq.com/incident_response/case_management/
docs.datadoghq.com
https://docs.datadoghq.com/incident_response/incident_management/investigate/declare/
docs.datadoghq.com
https://github.com/octo-sts/app
github.com
https://github.com/DataDog/dd-octo-sts-action
github.com
Commit signing support for bots and other GitHub Apps Read at the source ↗
github.blog
https://arxiv.org/abs/2512.09882
arxiv.org
https://arxiv.org/abs/2503.17332
arxiv.org
https://red.anthropic.com/2026/zero-days/
red.anthropic.com
Strengthening cyber resilience as AI capabilities advance Read at the source ↗
openai.com
https://api.github.com/users/hackerbot-claw/events/public
api.github.com
https://archive.is/cY0Us
archive.is
https://docs.datadoghq.com/security/code_security/iac_security/
docs.datadoghq.com
https://github.com/DataDog/datadog-iac-scanner/commit/05f7149f33bab5071f4bd070ea4e0faf4a7a5dfb
github.com
https://github.com/DataDog/datadog-iac-scanner/commit/1a47592c6f998580433f133dd0ad582f4c0036ae
github.com
https://github.com/DataDog/datadog-iac-scanner/blob/13bf0c8d0f9719534f5d3b4817f3831f5e2afe49/.github/workflows/sync-copywriter-changes.yaml
github.com
https://docs.github.com/en/actions/reference/security/secure-use
docs.github.com
https://github.com/DataDog/datadog-iac-scanner/commit/d49d46cada82bf5fea91dd24dca67ce20c4341f8
github.com
https://github.com/DataDog/datadog-agent/blob/33b67abdc0ba83b517c3d5625fd239655b5cf0ed/.github/workflows/assign_issue_triage.yml
github.com
Securing the AI software supply chain: Security results across 67 open source projects Read at the source ↗
github.blog
https://www.datadoghq.com/partner/open-source/
datadoghq.com
https://www-cdn.anthropic.com/c788cbc0a3da9135112f97cdf6dcd06f2c16cee2.pdf
www-cdn.anthropic.com
https://docs.github.com/en/actions/concepts/security/script-injections
docs.github.com
https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository
docs.github.com
https://docs.zizmor.sh/
docs.zizmor.sh
https://docs.github.com/en/actions/tutorials/authenticate-with-github_token
docs.github.com
https://docs.github.com/en/actions/how-tos/secure-your-work/security-harden-deployments
docs.github.com
https://docs.github.com/en/actions/how-tos/deploy/configure-and-manage-deployments/manage-environments
docs.github.com
https://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/use-secrets
docs.github.com
https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/about-rulesets
docs.github.com
https://www.datadoghq.com/blog/ai/harness-first-agents/
datadoghq.com
https://www.datadoghq.com/blog/ai/fully-autonomous-optimization/
datadoghq.com
https://securitylabs.datadoghq.com/newsletters/
securitylabs.datadoghq.com