Skip to content

Back to the catalog

Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era
wiz.ioarticle

Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era

Wiz announces a new endpoint sensor for developer workstations (Windows/macOS, private preview) that inventories packages, IDE extensions, AI coding agents, and MCP servers, and detects known/emerging supply chain attacks in real time. The post details three real-world campaigns that motivated it: Shai-Hulud (a self-propagating npm worm that ran TruffleHog via postinstall scripts to steal npm tokens and republish itself), the Axios backdoor (a compromised maintainer account injecting C2-calling code executed within 1.1 seconds of npm install), and s1ngularity (a compromised Nx build system/VS Code extension that harvested GitHub/npm/SSH/cloud credentials and weaponized local AI CLI tools like Claude and Gemini to exfiltrate filesystem data, leaking 1,000+ GitHub tokens and exposing 5,500 private repos).

TL;DR Wiz launches a developer-workstation sensor in response to npm/IDE supply chain worms (Shai-Hulud, Axios backdoor, s1ngularity) that steal credentials via postinstall scripts and AI CLI tools.
Open original ↗

Organisations named here

  • Axios npm backdoor
  • Shai-Hulud

Technologies named here

  • Wiz Sensor for Developer Workstations
  • Windows
  • Wiz Security Graph
  • macOS
  • npm
  • Wiz Reputation Database
  • axios
  • Wiz Defend Threats
  • Nx build system
  • Blue Agent
  • Wiz Workflows
  • Nx VS Code extension
  • TruffleHog
  • Wiz
  • Nx
  • VS Code
  • GitHub

Techniques named here

  • Malicious postinstall script execution
  • Credential harvesting from workstation
  • Self-propagation via stolen publish tokens
  • Silent C2 connection establishment
  • Weaponizing installed AI CLI tools for exfiltration
  • Compromised maintainer account

Threat actors named here

  • Shai-Hulud
  • Axios supply chain compromise
  • s1ngularity

Related in Supply Chain