When an AI Agent Came Knocking: Catching Malicious Contributions

Datadog’s BewAIre tool caught an attacker, hackerbot-claw, using an LLM to scale malicious contributions: 16 pull requests and 2 issues across 9 repositories, hiding shell commands and prompt injection aimed at Claude’s code action. Nothing landed; branch protections held too.