Definition
Malware that spreads through AI developer ecosystems (npm, PyPI, GitHub) by compromising a single developer account and then replicating itself across all packages and repositories that account maintains. It harvests developer credentials and cloud API keys, enabling widespread downstream compromise.
Why it matters
AI developers are high-value targets because their credentials grant access to frontier models, production AI infrastructure, and cloud environments. A single compromised developer account can cascade into thousands of poisoned packages affecting the entire AI developer supply chain.